# SUSE-SU-2026:4120-1: kernel-livepatch-SLE15-SP7-RT_Update_20 security update SUSE-SU-2026:4120-1, released September 10, 2026, fixes 662 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_20 (version 1-150700.1.3.1). One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-4120-1 - Platform: Linux - Released: Sep 10, 2026 - Priority: Patch now (Closes CVE-2025-39964, exploited (CISA KEV)) - CVEs: 662, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:4120-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-livepatch-SLE15-SP7-RT_Update_20](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-20.md) | sles 15.7 | 1-150700.1.3.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-39964](https://patchblox.com/security/data/cve/CVE-2025-39964.md) | Patch now | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | CISA KEV | | [CVE-2026-68160](https://patchblox.com/security/data/cve/CVE-2026-68160.md) | Urgent | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.8 | 0.0077 | | | [CVE-2026-72296](https://patchblox.com/security/data/cve/CVE-2026-72296.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife... | 9.1 | 0.0074 | | | [CVE-2026-64541](https://patchblox.com/security/data/cve/CVE-2026-64541.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... | 9.8 | 0.0057 | | | [CVE-2026-64056](https://patchblox.com/security/data/cve/CVE-2026-64056.md) | Urgent | kernel-64kb: CVE-2026-64055, net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893). | 9.8 | 0.0055 | | | [CVE-2026-64125](https://patchblox.com/security/data/cve/CVE-2026-64125.md) | Urgent | kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346). | 9.8 | 0.0055 | | | [CVE-2026-68127](https://patchblox.com/security/data/cve/CVE-2026-68127.md) | Urgent | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 9.8 | 0.0054 | | | [CVE-2026-72494](https://patchblox.com/security/data/cve/CVE-2026-72494.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with comp... | 9.8 | 0.0053 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 | | | [CVE-2026-64055](https://patchblox.com/security/data/cve/CVE-2026-64055.md) | Urgent | kernel-64kb: CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893). | 9.8 | 0.0051 | | | [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 | | | [CVE-2026-64033](https://patchblox.com/security/data/cve/CVE-2026-64033.md) | Urgent | kernel-64kb: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134). | 9.8 | 0.0049 | | | [CVE-2026-74345](https://patchblox.com/security/data/cve/CVE-2026-74345.md) | Urgent | RDMA/siw: Fix endpoint/socket association handling | 9.8 | 0.0048 | | | [CVE-2026-72463](https://patchblox.com/security/data/cve/CVE-2026-72463.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resum... | 9.8 | 0.0044 | | | [CVE-2026-53309](https://patchblox.com/security/data/cve/CVE-2026-53309.md) | Urgent | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | 0.0040 | | | [CVE-2026-68121](https://patchblox.com/security/data/cve/CVE-2026-68121.md) | Urgent | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | | | [CVE-2026-53260](https://patchblox.com/security/data/cve/CVE-2026-53260.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | | | [CVE-2026-68354](https://patchblox.com/security/data/cve/CVE-2026-68354.md) | Urgent | firewire: net: Fix fragmented datagram reassembly | 9.8 | 0.0028 | | | [CVE-2026-68402](https://patchblox.com/security/data/cve/CVE-2026-68402.md) | Urgent | wifi: cfg80211: bound element ID read when checking non-inheritance | 9.8 | 0.0027 | | | [CVE-2026-68360](https://patchblox.com/security/data/cve/CVE-2026-68360.md) | Urgent | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | 9.8 | 0.0024 | | | [CVE-2026-68359](https://patchblox.com/security/data/cve/CVE-2026-68359.md) | Urgent | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | 9.8 | 0.0023 | | | [CVE-2026-68212](https://patchblox.com/security/data/cve/CVE-2026-68212.md) | Urgent | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | 9.8 | 0.0022 | | | [CVE-2026-68214](https://patchblox.com/security/data/cve/CVE-2026-68214.md) | Urgent | media: rtl2832: fix use-after-free in rtl2832_remove() | 9.8 | 0.0022 | | | [CVE-2026-68218](https://patchblox.com/security/data/cve/CVE-2026-68218.md) | Urgent | media: pci: dm1105: Free allocated workqueue | 9.8 | 0.0022 | | | [CVE-2026-68180](https://patchblox.com/security/data/cve/CVE-2026-68180.md) | Urgent | intel_th: fix MSC output device reference leak | 9.8 | 0.0022 | | | [CVE-2026-68207](https://patchblox.com/security/data/cve/CVE-2026-68207.md) | Urgent | media: ti: vpe: unwind v4l2 device registration on probe error | 9.8 | 0.0022 | | | [CVE-2026-68166](https://patchblox.com/security/data/cve/CVE-2026-68166.md) | Urgent | userfaultfd: prevent registration of special VMAs | 9.8 | 0.0021 | | | [CVE-2026-80654](https://patchblox.com/security/data/cve/CVE-2026-80654.md) | Urgent | soc: xilinx: Shutdown and free rx mailbox channel | 9.8 | 0.0021 | | | [CVE-2026-68349](https://patchblox.com/security/data/cve/CVE-2026-68349.md) | Urgent | wifi: carl9170: fix buffer overflow in rx_stream failover path | 9.8 | 0.0020 | | | [CVE-2026-63881](https://patchblox.com/security/data/cve/CVE-2026-63881.md) | Urgent | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | 9.8 | 0.0019 | | | [CVE-2026-72288](https://patchblox.com/security/data/cve/CVE-2026-72288.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 | | | [CVE-2026-64565](https://patchblox.com/security/data/cve/CVE-2026-64565.md) | Urgent | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | 9.8 | 0.0018 | | | [CVE-2026-68132](https://patchblox.com/security/data/cve/CVE-2026-68132.md) | Urgent | super: fix emergency thaw deadlock on frozen block devices | 9.8 | 0.0018 | | | [CVE-2026-68325](https://patchblox.com/security/data/cve/CVE-2026-68325.md) | Urgent | iommu/amd: Bound the early ACPI HID map | 9.8 | 0.0018 | | | [CVE-2026-68406](https://patchblox.com/security/data/cve/CVE-2026-68406.md) | Urgent | wifi: cfg80211: validate PMSR FTM preamble range | 9.8 | 0.0018 | | | [CVE-2026-68357](https://patchblox.com/security/data/cve/CVE-2026-68357.md) | Urgent | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() | 9.8 | 0.0018 | | | [CVE-2026-68210](https://patchblox.com/security/data/cve/CVE-2026-68210.md) | Urgent | media: stm32: dcmi: unregister notifier on probe failure | 9.8 | 0.0018 | | | [CVE-2026-68310](https://patchblox.com/security/data/cve/CVE-2026-68310.md) | Urgent | wifi: mt76: mt7915: guard HE capability lookups | 9.8 | 0.0017 | | | [CVE-2026-68324](https://patchblox.com/security/data/cve/CVE-2026-68324.md) | Urgent | iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() | 9.8 | 0.0017 | | | [CVE-2026-68407](https://patchblox.com/security/data/cve/CVE-2026-68407.md) | Urgent | wifi: nl80211: free RNR data on MBSSID mismatch | 9.8 | 0.0017 | | | [CVE-2026-68399](https://patchblox.com/security/data/cve/CVE-2026-68399.md) | Urgent | bpf: Fix UAF in sock clone early bailouts | 9.8 | 0.0017 | | | [CVE-2026-63828](https://patchblox.com/security/data/cve/CVE-2026-63828.md) | Urgent | apparmor: mediate the implicit connect of TCP fast open sendmsg | 9.8 | 0.0017 | | | [CVE-2026-64562](https://patchblox.com/security/data/cve/CVE-2026-64562.md) | Urgent | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | | | [CVE-2026-68340](https://patchblox.com/security/data/cve/CVE-2026-68340.md) | Urgent | hwmon: occ: validate poll response sensor blocks | 9.8 | 0.0015 | | | [CVE-2026-68391](https://patchblox.com/security/data/cve/CVE-2026-68391.md) | Urgent | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 9.8 | 0.0013 | | | [CVE-2026-68377](https://patchblox.com/security/data/cve/CVE-2026-68377.md) | Urgent | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 9.8 | 0.0013 | | | [CVE-2026-68153](https://patchblox.com/security/data/cve/CVE-2026-68153.md) | Urgent | libceph: remove debugfs files before client teardown | 9.8 | 0.0013 | | | [CVE-2026-68236](https://patchblox.com/security/data/cve/CVE-2026-68236.md) | Urgent | drm/amd/display: set new_stream to NULL after release | 9.8 | 0.0013 | | | [CVE-2026-63827](https://patchblox.com/security/data/cve/CVE-2026-63827.md) | Urgent | apparmor: fix use-after-free in rawdata dedup loop | 9.8 | 0.0012 | | | [CVE-2026-68142](https://patchblox.com/security/data/cve/CVE-2026-68142.md) | Urgent | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | 0.0012 | | | [CVE-2026-63999](https://patchblox.com/security/data/cve/CVE-2026-63999.md) | Urgent | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | 9.8 | 0.0012 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-68143](https://patchblox.com/security/data/cve/CVE-2026-68143.md) | Urgent | net: slip: serialize receive against buffer reallocation | 9.8 | 0.0011 | | | [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | | | [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | | | [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-... | 9.8 | 0.0078 | | | [CVE-2026-68159](https://patchblox.com/security/data/cve/CVE-2026-68159.md) | High | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 | | | [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0074 | | | [CVE-2026-72069](https://patchblox.com/security/data/cve/CVE-2026-72069.md) | High | kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] | 9.8 | 0.0073 | | | [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-72473](https://patchblox.com/security/data/cve/CVE-2026-72473.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-64268](https://patchblox.com/security/data/cve/CVE-2026-64268.md) | High | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 | | | [CVE-2026-68154](https://patchblox.com/security/data/cve/CVE-2026-68154.md) | High | libceph: reject zero bucket types in crush_decode | 9.8 | 0.0071 | | | [CVE-2026-68158](https://patchblox.com/security/data/cve/CVE-2026-68158.md) | High | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | | | [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-64269](https://patchblox.com/security/data/cve/CVE-2026-64269.md) | High | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | 9.1 | 0.0071 | | | [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | kernel-default: Security update for the Linux Kernel | 9.8 | 0.0071 | | | [CVE-2026-68155](https://patchblox.com/security/data/cve/CVE-2026-68155.md) | High | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 | | | [CVE-2026-68157](https://patchblox.com/security/data/cve/CVE-2026-68157.md) | High | libceph: guard missing CRUSH type name lookup | 7.8 | 0.0070 | | | [CVE-2026-64303](https://patchblox.com/security/data/cve/CVE-2026-64303.md) | High | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path | 9.8 | 0.0069 | | | [CVE-2026-68156](https://patchblox.com/security/data/cve/CVE-2026-68156.md) | High | libceph: refresh auth->authorizer_buf{,_len} after authorizer update | 9.8 | 0.0069 | | | [CVE-2026-68161](https://patchblox.com/security/data/cve/CVE-2026-68161.md) | High | sctp: close UDP tunnel sockets during netns teardown | 9.8 | 0.0068 | | | [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 | | | [CVE-2026-72464](https://patchblox.com/security/data/cve/CVE-2026-72464.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0068 | | | [CVE-2026-72254](https://patchblox.com/security/data/cve/CVE-2026-72254.md) | High | kernel-uek64k-modules-core: netfilter: nft_fib: reject fib expression on the netdev egress hook (Theodor Arsenij Larionov-Trichkine) | 7.5 | 0.0067 | | | [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72046](https://patchblox.com/security/data/cve/CVE-2026-72046.md) | High | kernel-uek64k-modules-core: gve: fix header buffer corruption with header-split and HW-GRO (Ankit Garg) | 9.8 | 0.0064 | | | [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-63972](https://patchblox.com/security/data/cve/CVE-2026-63972.md) | High | kernel-default: Security update for the Linux Kernel | 7.5 | 0.0059 | | | [CVE-2026-72035](https://patchblox.com/security/data/cve/CVE-2026-72035.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0059 | | | [CVE-2026-68300](https://patchblox.com/security/data/cve/CVE-2026-68300.md) | High | sctp: auth: verify auth requirement when auth_chunk is NULL | 9.8 | 0.0058 | | | [CVE-2026-80590](https://patchblox.com/security/data/cve/CVE-2026-80590.md) | High | inet: frags: strip GSO state from fragments before reassembly | 8.8 | 0.0058 | | | [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 | | | [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | | | [CVE-2026-64577](https://patchblox.com/security/data/cve/CVE-2026-64577.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_... | 7.5 | 0.0058 | | | [CVE-2026-68123](https://patchblox.com/security/data/cve/CVE-2026-68123.md) | High | openvswitch: fix GSO userspace truncation underflow | 9.8 | 0.0055 | | | [CVE-2026-74394](https://patchblox.com/security/data/cve/CVE-2026-74394.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0054 | | | [CVE-2026-68136](https://patchblox.com/security/data/cve/CVE-2026-68136.md) | High | net: gro: fix double aggregation of flush-marked skbs | 9.8 | 0.0054 | | | [CVE-2026-43125](https://patchblox.com/security/data/cve/CVE-2026-43125.md) | High | dlm: validate length in dlm_search_rsb_tree | 9.8 | 0.0054 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-68137](https://patchblox.com/security/data/cve/CVE-2026-68137.md) | High | net/x25: fix use-after-free in x25_kill_by_neigh() | 9.8 | 0.0054 | | | [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() | 9.8 | 0.0053 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 | | | [CVE-2026-68117](https://patchblox.com/security/data/cve/CVE-2026-68117.md) | High | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 9.8 | 0.0053 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 | | | [CVE-2026-74495](https://patchblox.com/security/data/cve/CVE-2026-74495.md) | High | igbvf: Fix leak in TX DMA error cleanup | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-68343](https://patchblox.com/security/data/cve/CVE-2026-68343.md) | High | smb: client: validate DFS referral PathConsumed | 9.1 | 0.0051 | | | [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 | | | [CVE-2026-68315](https://patchblox.com/security/data/cve/CVE-2026-68315.md) | High | sctp: validate stream count in sctp_process_strreset_inreq() | 8.8 | 0.0051 | | | [CVE-2026-68129](https://patchblox.com/security/data/cve/CVE-2026-68129.md) | High | gve: fix Rx queue stall on alloc failure | 7.5 | 0.0051 | | | [CVE-2026-68299](https://patchblox.com/security/data/cve/CVE-2026-68299.md) | High | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets | 8.8 | 0.0050 | | | [CVE-2026-64048](https://patchblox.com/security/data/cve/CVE-2026-64048.md) | High | kernel-default: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484). | 7.8 | 0.0050 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-74717](https://patchblox.com/security/data/cve/CVE-2026-74717.md) | High | net/mlx5: fw_tracer, return NULL on create error | 7.5 | 0.0050 | | | [CVE-2026-64102](https://patchblox.com/security/data/cve/CVE-2026-64102.md) | High | kernel-64kb: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516). | 9.8 | 0.0050 | | | [CVE-2026-68082](https://patchblox.com/security/data/cve/CVE-2026-68082.md) | High | libceph: fix two unsafe bare decodes in decode_lockers() | 9.8 | 0.0050 | | | [CVE-2026-68426](https://patchblox.com/security/data/cve/CVE-2026-68426.md) | High | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 | | | [CVE-2026-46115](https://patchblox.com/security/data/cve/CVE-2026-46115.md) | High | block: add pgmap check to biovec_phys_mergeable | 9.8 | 0.0049 | | | [CVE-2026-64000](https://patchblox.com/security/data/cve/CVE-2026-64000.md) | High | kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030). | 9.8 | 0.0049 | | | [CVE-2026-74269](https://patchblox.com/security/data/cve/CVE-2026-74269.md) | High | bnxt: fix head underflow on XDP head-grow | 9.8 | 0.0049 | | | [CVE-2026-74474](https://patchblox.com/security/data/cve/CVE-2026-74474.md) | High | vxlan: use pskb_network_may_pull() for transmit path header pulls | 9.8 | 0.0049 | | | [CVE-2026-74692](https://patchblox.com/security/data/cve/CVE-2026-74692.md) | High | net/smc: fix TOCTOU race between smc_listen_out() and listener close | 7.5 | 0.0049 | | | [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | | | [CVE-2026-74550](https://patchblox.com/security/data/cve/CVE-2026-74550.md) | High | net: do not send ICMP/NDISC Redirects when peer allocation fails | 7.5 | 0.0048 | | | [CVE-2026-74695](https://patchblox.com/security/data/cve/CVE-2026-74695.md) | High | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 7.5 | 0.0048 | | | [CVE-2026-68302](https://patchblox.com/security/data/cve/CVE-2026-68302.md) | High | amt: re-read skb header pointers after every pull | 9.8 | 0.0048 | | | [CVE-2026-64148](https://patchblox.com/security/data/cve/CVE-2026-64148.md) | High | kernel-64kb: pds_core: check health in devcmd wait (bsc#1273956). | 7.5 | 0.0047 | | | [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | | | [CVE-2026-64448](https://patchblox.com/security/data/cve/CVE-2026-64448.md) | High | smb: client: restrict implied bcc[0] exemption to responses without data area | 8.2 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-31557](https://patchblox.com/security/data/cve/CVE-2026-31557.md) | High | nvmet: move async event work off nvmet-wq | 7.5 | 0.0045 | | | [CVE-2026-74581](https://patchblox.com/security/data/cve/CVE-2026-74581.md) | High | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 | | | [CVE-2026-68352](https://patchblox.com/security/data/cve/CVE-2026-68352.md) | High | wifi: ath6kl: fix OOB read from firmware IE lengths in connect event | 8.3 | 0.0042 | | | [CVE-2026-68196](https://patchblox.com/security/data/cve/CVE-2026-68196.md) | High | wifi: wilc1000: validate assoc response length before subtracting header | 8.3 | 0.0041 | | | [CVE-2026-68192](https://patchblox.com/security/data/cve/CVE-2026-68192.md) | High | wifi: brcmfmac: make release_scratchbuffers idempotent | 8.8 | 0.0041 | | | [CVE-2026-64136](https://patchblox.com/security/data/cve/CVE-2026-64136.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... | 9.8 | 0.0041 | | | [CVE-2026-74556](https://patchblox.com/security/data/cve/CVE-2026-74556.md) | High | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | 9.8 | 0.0040 | | | [CVE-2026-72469](https://patchblox.com/security/data/cve/CVE-2026-72469.md) | High | xprtrdma: Fix ep kref imbalance on ADDR_CHANGE | 8.8 | 0.0040 | | | [CVE-2026-68199](https://patchblox.com/security/data/cve/CVE-2026-68199.md) | High | wifi: ath6kl: fix OOB access from firmware ADDBA window size | 8.8 | 0.0038 | | | [CVE-2026-68433](https://patchblox.com/security/data/cve/CVE-2026-68433.md) | High | libceph: bound get_version reply decode to front len | 8.6 | 0.0036 | | | [CVE-2026-64597](https://patchblox.com/security/data/cve/CVE-2026-64597.md) | High | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 | | | [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 | 8.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). | 8.1 | 0.0035 | | | [CVE-2026-68124](https://patchblox.com/security/data/cve/CVE-2026-68124.md) | High | mctp: serial: handle zero-length frames to prevent rx buffer overflow | 9.6 | 0.0034 | | | [CVE-2026-53180](https://patchblox.com/security/data/cve/CVE-2026-53180.md) | High | kernel-64kb: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888). | 7.5 | 0.0034 | | | [CVE-2026-63980](https://patchblox.com/security/data/cve/CVE-2026-63980.md) | High | kernel-64kb: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028). | 7.5 | 0.0034 | | | [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel-default: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662). | 8.8 | 0.0033 | | | [CVE-2026-64445](https://patchblox.com/security/data/cve/CVE-2026-64445.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and... | 8.8 | 0.0032 | | | [CVE-2026-68125](https://patchblox.com/security/data/cve/CVE-2026-68125.md) | High | mac802154: llsec: reject frames shorter than the authentication tag | 8.8 | 0.0032 | | | [CVE-2026-68470](https://patchblox.com/security/data/cve/CVE-2026-68470.md) | High | wifi: mac80211: validate extension-frame layout before RX | 8.8 | 0.0031 | | | [CVE-2026-64178](https://patchblox.com/security/data/cve/CVE-2026-64178.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0030 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2026-64442](https://patchblox.com/security/data/cve/CVE-2026-64442.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in... | 8.1 | 0.0029 | | | [CVE-2026-64444](https://patchblox.com/security/data/cve/CVE-2026-64444.md) | High | staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | 8.1 | 0.0029 | | | [CVE-2026-68353](https://patchblox.com/security/data/cve/CVE-2026-68353.md) | High | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler | 8.1 | 0.0029 | | | [CVE-2026-64547](https://patchblox.com/security/data/cve/CVE-2026-64547.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa... | 8.1 | 0.0028 | | | [CVE-2026-43213](https://patchblox.com/security/data/cve/CVE-2026-43213.md) | High | wifi: rtw89: pci: validate sequence number of TX release report | 7.5 | 0.0028 | | | [CVE-2026-64088](https://patchblox.com/security/data/cve/CVE-2026-64088.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 | | | [CVE-2026-64443](https://patchblox.com/security/data/cve/CVE-2026-64443.md) | High | staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop | 8.1 | 0.0028 | | | [CVE-2026-64598](https://patchblox.com/security/data/cve/CVE-2026-64598.md) | High | smb/client: Fix error code in smb2_aead_req_alloc() | 8.8 | 0.0028 | | | [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 | | | [CVE-2026-64540](https://patchblox.com/security/data/cve/CVE-2026-64540.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli... | 8.1 | 0.0028 | | | [CVE-2026-68373](https://patchblox.com/security/data/cve/CVE-2026-68373.md) | High | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() | 8.1 | 0.0028 | | | [CVE-2026-64406](https://patchblox.com/security/data/cve/CVE-2026-64406.md) | High | Bluetooth: fix UAF in bt_accept_dequeue() | 8.0 | 0.0028 | | | [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). | 7.0 | 0.0028 | | | [CVE-2026-64440](https://patchblox.com/security/data/cve/CVE-2026-64440.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han... | 8.1 | 0.0027 | | | [CVE-2026-64403](https://patchblox.com/security/data/cve/CVE-2026-64403.md) | High | Bluetooth: L2CAP: validate option length before reading conf opt value | 7.1 | 0.0027 | | | [CVE-2026-64408](https://patchblox.com/security/data/cve/CVE-2026-64408.md) | High | Bluetooth: bnep: pin L2CAP connection during netdev registration | 8.8 | 0.0026 | | | [CVE-2026-68091](https://patchblox.com/security/data/cve/CVE-2026-68091.md) | High | HID: wacom: stop hardware after post-start probe failures | 8.8 | 0.0026 | | | [CVE-2026-68326](https://patchblox.com/security/data/cve/CVE-2026-68326.md) | High | wifi: mwifiex: bound uAP association event IEs to the event buffer | 8.8 | 0.0026 | | | [CVE-2026-68397](https://patchblox.com/security/data/cve/CVE-2026-68397.md) | High | net/iucv: take a reference on the socket found in afiucv_hs_rcv() | 8.8 | 0.0026 | | | [CVE-2026-68425](https://patchblox.com/security/data/cve/CVE-2026-68425.md) | High | IB/mad: Drop unmatched RMPP responses before reassembly | 7.1 | 0.0026 | | | [CVE-2026-64536](https://patchblox.com/security/data/cve/CVE-2026-64536.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk... | 8.1 | 0.0026 | | | [CVE-2026-74537](https://patchblox.com/security/data/cve/CVE-2026-74537.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_rea... | 8.8 | 0.0026 | | | [CVE-2026-64434](https://patchblox.com/security/data/cve/CVE-2026-64434.md) | High | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | 8.8 | 0.0026 | | | [CVE-2026-64554](https://patchblox.com/security/data/cve/CVE-2026-64554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in... | 8.8 | 0.0026 | | | [CVE-2026-74488](https://patchblox.com/security/data/cve/CVE-2026-74488.md) | High | wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames | 8.8 | 0.0026 | | | [CVE-2026-68389](https://patchblox.com/security/data/cve/CVE-2026-68389.md) | High | Bluetooth: hci_qca: Clear memdump state on invalid dump size | 8.8 | 0.0025 | | | [CVE-2026-74509](https://patchblox.com/security/data/cve/CVE-2026-74509.md) | High | Bluetooth: hci_sync: Fix advertising data UAFs | 8.8 | 0.0025 | | | [CVE-2026-68278](https://patchblox.com/security/data/cve/CVE-2026-68278.md) | High | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | 8.1 | 0.0024 | | | [CVE-2025-40022](https://patchblox.com/security/data/cve/CVE-2025-40022.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2026-64515](https://patchblox.com/security/data/cve/CVE-2026-64515.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith... | 8.3 | 0.0024 | | | [CVE-2026-68480](https://patchblox.com/security/data/cve/CVE-2026-68480.md) | High | x86/bugs: Make Safe-RET robust against interrupt injection | 8.8 | 0.0023 | | | [CVE-2026-68398](https://patchblox.com/security/data/cve/CVE-2026-68398.md) | High | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | 9.8 | 0.0023 | | | [CVE-2026-68414](https://patchblox.com/security/data/cve/CVE-2026-68414.md) | High | wifi: cfg80211: cancel sched scan results work on unregister | 7.5 | 0.0023 | | | [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | | | [CVE-2026-68138](https://patchblox.com/security/data/cve/CVE-2026-68138.md) | High | net/sched: serialize qdisc_rtab_list against concurrent get/put | 8.8 | 0.0022 | | | [CVE-2026-64452](https://patchblox.com/security/data/cve/CVE-2026-64452.md) | High | 6lowpan: fix NHC entry use-after-free on error path | 7.1 | 0.0022 | | | [CVE-2026-68351](https://patchblox.com/security/data/cve/CVE-2026-68351.md) | High | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read | 7.1 | 0.0022 | | | [CVE-2026-68188](https://patchblox.com/security/data/cve/CVE-2026-68188.md) | High | Bluetooth: RFCOMM: Fix session UAF in set_termios | 8.8 | 0.0022 | | | [CVE-2026-68368](https://patchblox.com/security/data/cve/CVE-2026-68368.md) | High | usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() | 7.1 | 0.0022 | | | [CVE-2026-68181](https://patchblox.com/security/data/cve/CVE-2026-68181.md) | High | mei: bus: access mei_device under device_lock on cleanup | 7.8 | 0.0021 | | | [CVE-2026-68182](https://patchblox.com/security/data/cve/CVE-2026-68182.md) | High | comedi: comedi_parport: deal with premature interrupt | 7.1 | 0.0021 | | | [CVE-2026-68286](https://patchblox.com/security/data/cve/CVE-2026-68286.md) | High | drop_monitor: perform u64_stats updates under IRQ-disabled section | 7.1 | 0.0021 | | | [CVE-2026-63810](https://patchblox.com/security/data/cve/CVE-2026-63810.md) | High | block: Avoid mounting the bdev pseudo-filesystem in userspace | 7.1 | 0.0021 | | | [CVE-2026-68193](https://patchblox.com/security/data/cve/CVE-2026-68193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio... | 8.1 | 0.0021 | | | [CVE-2026-64572](https://patchblox.com/security/data/cve/CVE-2026-64572.md) | High | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 8.8 | 0.0020 | | | [CVE-2026-68162](https://patchblox.com/security/data/cve/CVE-2026-68162.md) | High | sctp: avoid auth_enable sysctl UAF during netns teardown | 8.8 | 0.0020 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-64010](https://patchblox.com/security/data/cve/CVE-2026-64010.md) | High | kernel-default: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). | 8.8 | 0.0020 | | | [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 | | | [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 | | | [CVE-2026-68085](https://patchblox.com/security/data/cve/CVE-2026-68085.md) | High | Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | 8.0 | 0.0020 | | | [CVE-2026-68255](https://patchblox.com/security/data/cve/CVE-2026-68255.md) | High | drm/virtio: bound EDID block reads to the response buffer | 7.7 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). | 8.4 | 0.0019 | | | [CVE-2026-68093](https://patchblox.com/security/data/cve/CVE-2026-68093.md) | High | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug | 7.0 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0019 | | | [CVE-2026-72495](https://patchblox.com/security/data/cve/CVE-2026-72495.md) | High | RDMA/bnxt_re: Avoid repeated requests to allocate WC pages | 9.3 | 0.0019 | | | [CVE-2026-64039](https://patchblox.com/security/data/cve/CVE-2026-64039.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.7 | 0.0019 | | | [CVE-2026-64484](https://patchblox.com/security/data/cve/CVE-2026-64484.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value... | n/a | 0.0019 | | | [CVE-2026-68363](https://patchblox.com/security/data/cve/CVE-2026-68363.md) | High | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 8.8 | 0.0018 | | | [CVE-2026-68366](https://patchblox.com/security/data/cve/CVE-2026-68366.md) | High | usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer | 8.1 | 0.0018 | | | [CVE-2026-64470](https://patchblox.com/security/data/cve/CVE-2026-64470.md) | High | Bluetooth: btusb: fix use-after-free on marvell probe failure | 7.1 | 0.0018 | | | [CVE-2026-64471](https://patchblox.com/security/data/cve/CVE-2026-64471.md) | High | Bluetooth: btusb: fix use-after-free on registration failure | 7.1 | 0.0018 | | | [CVE-2026-68135](https://patchblox.com/security/data/cve/CVE-2026-68135.md) | High | net: hip04: fix RX buffer leak on build_skb failure | 7.1 | 0.0018 | | | [CVE-2026-68350](https://patchblox.com/security/data/cve/CVE-2026-68350.md) | High | wifi: carl9170: fix OOB read from off-by-two in TX status handler | 7.1 | 0.0018 | | | [CVE-2026-68365](https://patchblox.com/security/data/cve/CVE-2026-68365.md) | High | USB: serial: io_edgeport: cap received transmit credits | 7.1 | 0.0018 | | | [CVE-2026-64483](https://patchblox.com/security/data/cve/CVE-2026-64483.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t... | 7.0 | 0.0018 | | | [CVE-2026-64570](https://patchblox.com/security/data/cve/CVE-2026-64570.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o... | 7.8 | 0.0018 | | | [CVE-2026-72262](https://patchblox.com/security/data/cve/CVE-2026-72262.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0018 | | | [CVE-2026-74584](https://patchblox.com/security/data/cve/CVE-2026-74584.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0018 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 | | | [CVE-2026-68289](https://patchblox.com/security/data/cve/CVE-2026-68289.md) | High | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 7.0 | 0.0018 | | | [CVE-2026-64513](https://patchblox.com/security/data/cve/CVE-2026-64513.md) | High | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | 8.4 | 0.0018 | | | [CVE-2026-68202](https://patchblox.com/security/data/cve/CVE-2026-68202.md) | High | ALSA: seq: close a re-opened queue timer in the destructor | 7.8 | 0.0018 | | | [CVE-2026-68206](https://patchblox.com/security/data/cve/CVE-2026-68206.md) | High | media: v4l2-ctrls: validate HEVC active reference counts | 7.8 | 0.0018 | | | [CVE-2026-68213](https://patchblox.com/security/data/cve/CVE-2026-68213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta... | 7.8 | 0.0018 | | | [CVE-2026-68216](https://patchblox.com/security/data/cve/CVE-2026-68216.md) | High | media: pwc: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-68088](https://patchblox.com/security/data/cve/CVE-2026-68088.md) | High | usb: gadget: function: rndis: add length check to response query | 7.1 | 0.0018 | | | [CVE-2026-64503](https://patchblox.com/security/data/cve/CVE-2026-64503.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w... | n/a | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-64481](https://patchblox.com/security/data/cve/CVE-2026-64481.md) | High | ALSA: hda/cs35l41: Fix firmware load work teardown | 7.8 | 0.0018 | | | [CVE-2026-68204](https://patchblox.com/security/data/cve/CVE-2026-68204.md) | High | media: vivid: check for vb2_is_busy() when toggling caps | 7.8 | 0.0018 | | | [CVE-2026-68209](https://patchblox.com/security/data/cve/CVE-2026-68209.md) | High | media: sun4i-csi: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-63842](https://patchblox.com/security/data/cve/CVE-2026-63842.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63850](https://patchblox.com/security/data/cve/CVE-2026-63850.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-68219](https://patchblox.com/security/data/cve/CVE-2026-68219.md) | High | media: nxp: imx8-isi: Fix potential out-of-bounds issues | 7.8 | 0.0018 | | | [CVE-2026-63923](https://patchblox.com/security/data/cve/CVE-2026-63923.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_h... | 8.8 | 0.0017 | | | [CVE-2026-23227](https://patchblox.com/security/data/cve/CVE-2026-23227.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 | | | [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-64276](https://patchblox.com/security/data/cve/CVE-2026-64276.md) | High | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | 8.8 | 0.0017 | | | [CVE-2026-64277](https://patchblox.com/security/data/cve/CVE-2026-64277.md) | High | Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count | 8.8 | 0.0017 | | | [CVE-2026-64304](https://patchblox.com/security/data/cve/CVE-2026-64304.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... | 8.8 | 0.0017 | | | [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-64271](https://patchblox.com/security/data/cve/CVE-2026-64271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever... | 7.8 | 0.0017 | | | [CVE-2026-64273](https://patchblox.com/security/data/cve/CVE-2026-64273.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-... | 7.8 | 0.0017 | | | [CVE-2026-64274](https://patchblox.com/security/data/cve/CVE-2026-64274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contac... | 7.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-64333](https://patchblox.com/security/data/cve/CVE-2026-64333.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c... | 7.8 | 0.0017 | | | [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72123](https://patchblox.com/security/data/cve/CVE-2026-72123.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-64582](https://patchblox.com/security/data/cve/CVE-2026-64582.md) | High | RDMA/rxe: Fix a use-after-free problem in rxe_mmap | 8.8 | 0.0017 | | | [CVE-2026-68267](https://patchblox.com/security/data/cve/CVE-2026-68267.md) | High | kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] | 7.8 | 0.0017 | | | [CVE-2026-68306](https://patchblox.com/security/data/cve/CVE-2026-68306.md) | High | wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() | 7.1 | 0.0017 | | | [CVE-2026-64563](https://patchblox.com/security/data/cve/CVE-2026-64563.md) | High | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 | | | [CVE-2026-64219](https://patchblox.com/security/data/cve/CVE-2026-64219.md) | High | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | 7.8 | 0.0017 | | | [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 | | | [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 | | | [CVE-2026-64504](https://patchblox.com/security/data/cve/CVE-2026-64504.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI... | n/a | 0.0017 | | | [CVE-2026-64346](https://patchblox.com/security/data/cve/CVE-2026-64346.md) | High | usb: gadget: udc: Fix use-after-free in gadget_match_driver | 7.8 | 0.0016 | | | [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-72500](https://patchblox.com/security/data/cve/CVE-2026-72500.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmwar... | 8.8 | 0.0016 | | | [CVE-2026-68260](https://patchblox.com/security/data/cve/CVE-2026-68260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before map... | 7.8 | 0.0016 | | | [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 | | | [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 | | | [CVE-2026-64243](https://patchblox.com/security/data/cve/CVE-2026-64243.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bound... | 7.1 | 0.0016 | | | [CVE-2026-64294](https://patchblox.com/security/data/cve/CVE-2026-64294.md) | High | mm: do file ownership checks with the proper mount idmap | 7.1 | 0.0016 | | | [CVE-2026-68229](https://patchblox.com/security/data/cve/CVE-2026-68229.md) | High | media: cedrus: skip invalid H.264 reference list entries | 7.1 | 0.0016 | | | [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 | | | [CVE-2026-64574](https://patchblox.com/security/data/cve/CVE-2026-64574.md) | High | wifi: mac80211: tear down new links on vif update error path | 7.8 | 0.0016 | | | [CVE-2026-64603](https://patchblox.com/security/data/cve/CVE-2026-64603.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han... | n/a | 0.0016 | | | [CVE-2026-64247](https://patchblox.com/security/data/cve/CVE-2026-64247.md) | High | KVM: x86: hyper-v: Bound the bank index when querying sparse banks | 8.4 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 | | | [CVE-2025-68179](https://patchblox.com/security/data/cve/CVE-2025-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP... | 7.8 | 0.0015 | | | [CVE-2025-71075](https://patchblox.com/security/data/cve/CVE-2025-71075.md) | High | scsi: aic94xx: fix use-after-free in device removal path | 7.8 | 0.0015 | | | [CVE-2026-64118](https://patchblox.com/security/data/cve/CVE-2026-64118.md) | High | kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). | 8.4 | 0.0015 | | | [CVE-2026-53273](https://patchblox.com/security/data/cve/CVE-2026-53273.md) | High | kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713). | 7.8 | 0.0015 | | | [CVE-2025-40199](https://patchblox.com/security/data/cve/CVE-2025-40199.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing o... | 7.8 | 0.0015 | | | [CVE-2026-68086](https://patchblox.com/security/data/cve/CVE-2026-68086.md) | High | mm/khugepaged: write all dirty file folios when collapsing | 8.8 | 0.0015 | | | [CVE-2026-64315](https://patchblox.com/security/data/cve/CVE-2026-64315.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard... | 7.0 | 0.0015 | | | [CVE-2025-39939](https://patchblox.com/security/data/cve/CVE-2025-39939.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2026-68432](https://patchblox.com/security/data/cve/CVE-2026-68432.md) | High | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-68253](https://patchblox.com/security/data/cve/CVE-2026-68253.md) | High | drm/i915/hdcp: check streams[] bounds before overflow | 7.8 | 0.0014 | | | [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0014 | | | [CVE-2026-74712](https://patchblox.com/security/data/cve/CVE-2026-74712.md) | High | kernel-uek64k-modules-core: vdpa/mlx5: Fix buffer length in create_direct_keys() (Christian Borntraeger) | 9.3 | 0.0014 | | | [CVE-2026-64548](https://patchblox.com/security/data/cve/CVE-2026-64548.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in b... | 8.4 | 0.0014 | | | [CVE-2026-64552](https://patchblox.com/security/data/cve/CVE-2026-64552.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece... | 8.4 | 0.0014 | | | [CVE-2026-63879](https://patchblox.com/security/data/cve/CVE-2026-63879.md) | High | drm/amdgpu: fix amdgpu_hmm_range_get_pages | 7.8 | 0.0014 | | | [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-74510](https://patchblox.com/security/data/cve/CVE-2026-74510.md) | High | Bluetooth: mgmt: fix UAF in pair command cancellation | 9.8 | 0.0014 | | | [CVE-2026-68293](https://patchblox.com/security/data/cve/CVE-2026-68293.md) | High | net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | 8.8 | 0.0014 | | | [CVE-2026-53091](https://patchblox.com/security/data/cve/CVE-2026-53091.md) | High | net: pull headers in qdisc_pkt_len_segs_init() | 8.4 | 0.0014 | | | [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 | | | [CVE-2026-64084](https://patchblox.com/security/data/cve/CVE-2026-64084.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64085](https://patchblox.com/security/data/cve/CVE-2026-64085.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64086](https://patchblox.com/security/data/cve/CVE-2026-64086.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64463](https://patchblox.com/security/data/cve/CVE-2026-64463.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port... | 7.8 | 0.0014 | | | [CVE-2026-68222](https://patchblox.com/security/data/cve/CVE-2026-68222.md) | High | media: msi2500: Return queued buffers on start_streaming() failure | 7.8 | 0.0014 | | | [CVE-2026-68145](https://patchblox.com/security/data/cve/CVE-2026-68145.md) | High | iomap: fix out-of-bounds bitmap_set() with zero-length range | 8.8 | 0.0014 | | | [CVE-2026-68257](https://patchblox.com/security/data/cve/CVE-2026-68257.md) | High | drm/amdkfd: fix 32-bit overflow in CWSR total size calculation | 7.8 | 0.0014 | | | [CVE-2026-68370](https://patchblox.com/security/data/cve/CVE-2026-68370.md) | High | usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback | 7.8 | 0.0014 | | | [CVE-2026-72496](https://patchblox.com/security/data/cve/CVE-2026-72496.md) | High | RDMA/bnxt_re: Proper rollback if the ioremap fails | 9.2 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 | | | [CVE-2026-68108](https://patchblox.com/security/data/cve/CVE-2026-68108.md) | High | drm/amdgpu/vce: fix integer overflow in image size | 8.8 | 0.0014 | | | [CVE-2026-68149](https://patchblox.com/security/data/cve/CVE-2026-68149.md) | High | fs: preserve ACL_DONT_CACHE state in forget_cached_acl() | 8.4 | 0.0014 | | | [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 | | | [CVE-2026-63937](https://patchblox.com/security/data/cve/CVE-2026-63937.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 | | | [CVE-2026-74516](https://patchblox.com/security/data/cve/CVE-2026-74516.md) | High | KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active | 8.8 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). | 7.8 | 0.0014 | | | [CVE-2026-68284](https://patchblox.com/security/data/cve/CVE-2026-68284.md) | High | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 7.8 | 0.0014 | | | [CVE-2026-68335](https://patchblox.com/security/data/cve/CVE-2026-68335.md) | High | rds: drop incoming messages that cross network namespace boundaries | 7.8 | 0.0014 | | | [CVE-2026-64126](https://patchblox.com/security/data/cve/CVE-2026-64126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0014 | | | [CVE-2026-64099](https://patchblox.com/security/data/cve/CVE-2026-64099.md) | High | kernel-64kb: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465). | 7.8 | 0.0013 | | | [CVE-2026-64388](https://patchblox.com/security/data/cve/CVE-2026-64388.md) | High | smb/client: fix chown/chgrp with SMB3 POSIX Extensions | 7.8 | 0.0013 | | | [CVE-2026-68152](https://patchblox.com/security/data/cve/CVE-2026-68152.md) | High | amt: fix use-after-free in AMT delayed works | 7.8 | 0.0013 | | | [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). | 7.8 | 0.0013 | | | [CVE-2026-53330](https://patchblox.com/security/data/cve/CVE-2026-53330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_ge... | 7.1 | 0.0013 | | | [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 | | | [CVE-2026-74481](https://patchblox.com/security/data/cve/CVE-2026-74481.md) | High | mm/page_reporting: use system_freezable_wq to fix UAF during suspend | 7.8 | 0.0013 | | | [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 | | | [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 | | | [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 | | | [CVE-2026-68262](https://patchblox.com/security/data/cve/CVE-2026-68262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_se... | 7.1 | 0.0013 | | | [CVE-2026-68348](https://patchblox.com/security/data/cve/CVE-2026-68348.md) | High | ASoC: tas2781: bound firmware description string parsing | 7.1 | 0.0013 | | | [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 | | | [CVE-2026-74527](https://patchblox.com/security/data/cve/CVE-2026-74527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special... | 8.8 | 0.0013 | | | [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). | 7.8 | 0.0013 | | | [CVE-2026-64097](https://patchblox.com/security/data/cve/CVE-2026-64097.md) | High | drm/amd/display: Validate GPIO pin LUT table size before iterating | 7.8 | 0.0013 | | | [CVE-2026-64133](https://patchblox.com/security/data/cve/CVE-2026-64133.md) | High | ALSA: asihpi: Fix potential OOB array access at reading cache | 7.8 | 0.0013 | | | [CVE-2026-64218](https://patchblox.com/security/data/cve/CVE-2026-64218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbon... | 7.8 | 0.0013 | | | [CVE-2026-68104](https://patchblox.com/security/data/cve/CVE-2026-68104.md) | High | drm/amdgpu: invoke pm_genpd_remove() before freeing genpd | 7.8 | 0.0013 | | | [CVE-2026-68106](https://patchblox.com/security/data/cve/CVE-2026-68106.md) | High | drm/amdgpu: fix division by zero with invalid uvd dimensions | 7.8 | 0.0013 | | | [CVE-2026-68245](https://patchblox.com/security/data/cve/CVE-2026-68245.md) | High | drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() | 7.8 | 0.0013 | | | [CVE-2026-68297](https://patchblox.com/security/data/cve/CVE-2026-68297.md) | High | tipc: fix u16 MTU truncation in media and bearer MTU validation | 7.8 | 0.0013 | | | [CVE-2026-64546](https://patchblox.com/security/data/cve/CVE-2026-64546.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(... | 7.1 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | kernel-default: af_unix: Peek the queue synchronized (bsc#1273748). | 8.8 | 0.0013 | | | [CVE-2026-72497](https://patchblox.com/security/data/cve/CVE-2026-72497.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The v... | 8.8 | 0.0013 | | | [CVE-2026-72499](https://patchblox.com/security/data/cve/CVE-2026-72499.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware... | 8.8 | 0.0013 | | | [CVE-2026-64051](https://patchblox.com/security/data/cve/CVE-2026-64051.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range... | 8.1 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-63995](https://patchblox.com/security/data/cve/CVE-2026-63995.md) | High | kernel-64kb: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033). | 7.8 | 0.0013 | | | [CVE-2026-63996](https://patchblox.com/security/data/cve/CVE-2026-63996.md) | High | kernel-64kb: ethtool: cmis: require exact CDB reply length (bsc#1273032). | 7.8 | 0.0013 | | | [CVE-2026-64001](https://patchblox.com/security/data/cve/CVE-2026-64001.md) | High | ALSA: pcm: oss: Fix setup list UAF on proc write error | 7.8 | 0.0013 | | | [CVE-2026-64134](https://patchblox.com/security/data/cve/CVE-2026-64134.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-64137](https://patchblox.com/security/data/cve/CVE-2026-64137.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-64225](https://patchblox.com/security/data/cve/CVE-2026-64225.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed... | 7.8 | 0.0013 | | | [CVE-2026-64348](https://patchblox.com/security/data/cve/CVE-2026-64348.md) | High | usb: free iso schedules on failed submit | 7.8 | 0.0013 | | | [CVE-2026-64365](https://patchblox.com/security/data/cve/CVE-2026-64365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driv... | 7.8 | 0.0013 | | | [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 | | | [CVE-2026-68392](https://patchblox.com/security/data/cve/CVE-2026-68392.md) | High | Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync | 7.8 | 0.0013 | | | [CVE-2026-68419](https://patchblox.com/security/data/cve/CVE-2026-68419.md) | High | RDMA/irdma: Prevent rereg_mr for non-mem regions | 7.8 | 0.0013 | | | [CVE-2026-74334](https://patchblox.com/security/data/cve/CVE-2026-74334.md) | High | RDMA/nldev: Fix locking when accessing mr->pd | 7.8 | 0.0013 | | | [CVE-2026-74454](https://patchblox.com/security/data/cve/CVE-2026-74454.md) | High | drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size | 7.8 | 0.0013 | | | [CVE-2026-74610](https://patchblox.com/security/data/cve/CVE-2026-74610.md) | High | tls: don't leave a full plaintext sk_msg ring unpushed | 7.8 | 0.0013 | | | [CVE-2026-23454](https://patchblox.com/security/data/cve/CVE-2026-23454.md) | High | kernel-default: Security update for the Linux Kernel | 7.0 | 0.0013 | | | [CVE-2026-64224](https://patchblox.com/security/data/cve/CVE-2026-64224.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_in... | 7.8 | 0.0013 | | | [CVE-2026-68320](https://patchblox.com/security/data/cve/CVE-2026-68320.md) | High | sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid | 7.5 | 0.0013 | | | [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 | | | [CVE-2026-64146](https://patchblox.com/security/data/cve/CVE-2026-64146.md) | High | erofs: fix metabuf leak in inode xattr initialization | 7.1 | 0.0013 | | | [CVE-2026-64436](https://patchblox.com/security/data/cve/CVE-2026-64436.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s... | 7.1 | 0.0013 | | | [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 | | | [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 | | | [CVE-2026-68329](https://patchblox.com/security/data/cve/CVE-2026-68329.md) | High | iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() | 8.8 | 0.0013 | | | [CVE-2026-64266](https://patchblox.com/security/data/cve/CVE-2026-64266.md) | High | fuse: re-lock request before returning from fuse_ref_folio() | 7.8 | 0.0013 | | | [CVE-2026-64539](https://patchblox.com/security/data/cve/CVE-2026-64539.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepend... | 7.8 | 0.0013 | | | [CVE-2026-68445](https://patchblox.com/security/data/cve/CVE-2026-68445.md) | High | drm/vc4: Prevent shader BO mappings from becoming writable | 7.8 | 0.0013 | | | [CVE-2026-74496](https://patchblox.com/security/data/cve/CVE-2026-74496.md) | High | fou: Fix use-after-free in fou_create() | 9.8 | 0.0013 | | | [CVE-2026-74518](https://patchblox.com/security/data/cve/CVE-2026-74518.md) | High | mm/hugetlb: fix list corruption in allocate_file_region_entries() | 8.8 | 0.0013 | | | [CVE-2026-43015](https://patchblox.com/security/data/cve/CVE-2026-43015.md) | High | kernel-64kb: CVE-2026-43014, net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012). | 7.8 | 0.0013 | | | [CVE-2026-64011](https://patchblox.com/security/data/cve/CVE-2026-64011.md) | High | kernel-default: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). | 7.8 | 0.0013 | | | [CVE-2026-64305](https://patchblox.com/security/data/cve/CVE-2026-64305.md) | High | crypto: qat - protect service table iterations with service_lock | 7.8 | 0.0013 | | | [CVE-2026-64329](https://patchblox.com/security/data/cve/CVE-2026-64329.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucs... | 7.8 | 0.0013 | | | [CVE-2026-64340](https://patchblox.com/security/data/cve/CVE-2026-64340.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconn... | 7.8 | 0.0013 | | | [CVE-2026-64341](https://patchblox.com/security/data/cve/CVE-2026-64341.md) | High | USB: iowarrior: fix use-after-free on disconnect race | 7.8 | 0.0013 | | | [CVE-2026-64342](https://patchblox.com/security/data/cve/CVE-2026-64342.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect... | 7.8 | 0.0013 | | | [CVE-2026-64343](https://patchblox.com/security/data/cve/CVE-2026-64343.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect rac... | 7.8 | 0.0013 | | | [CVE-2026-64344](https://patchblox.com/security/data/cve/CVE-2026-64344.md) | High | linux-6.12: In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect r... | 7.8 | 0.0013 | | | [CVE-2026-64362](https://patchblox.com/security/data/cve/CVE-2026-64362.md) | High | HID: lg-g15: cancel pending work on remove to fix a use-after-free | 7.8 | 0.0013 | | | [CVE-2026-64401](https://patchblox.com/security/data/cve/CVE-2026-64401.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registra... | 7.8 | 0.0013 | | | [CVE-2026-64543](https://patchblox.com/security/data/cve/CVE-2026-64543.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti... | 7.8 | 0.0013 | | | [CVE-2026-68427](https://patchblox.com/security/data/cve/CVE-2026-68427.md) | High | gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings | 7.8 | 0.0013 | | | [CVE-2026-74482](https://patchblox.com/security/data/cve/CVE-2026-74482.md) | High | mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios | 7.8 | 0.0013 | | | [CVE-2026-74512](https://patchblox.com/security/data/cve/CVE-2026-74512.md) | High | audit: fix potential use-after-free in audit_del_rule() | 7.8 | 0.0013 | | | [CVE-2026-74548](https://patchblox.com/security/data/cve/CVE-2026-74548.md) | High | forcedeth: fix UAF of txrx_stats in nv_remove | 7.8 | 0.0013 | | | [CVE-2026-43386](https://patchblox.com/security/data/cve/CVE-2026-43386.md) | High | kernel-64kb: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740). | 7.1 | 0.0013 | | | [CVE-2026-64014](https://patchblox.com/security/data/cve/CVE-2026-64014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 | | | [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0013 | | | [CVE-2026-64421](https://patchblox.com/security/data/cve/CVE-2026-64421.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remo... | 7.8 | 0.0013 | | | [CVE-2026-64433](https://patchblox.com/security/data/cve/CVE-2026-64433.md) | High | Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete | 7.8 | 0.0013 | | | [CVE-2026-64567](https://patchblox.com/security/data/cve/CVE-2026-64567.md) | High | btrfs: reject free space cache with more entries than pages | 7.8 | 0.0013 | | | [CVE-2026-68263](https://patchblox.com/security/data/cve/CVE-2026-68263.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_en... | 7.8 | 0.0013 | | | [CVE-2026-68394](https://patchblox.com/security/data/cve/CVE-2026-68394.md) | High | kernel-uek64k-modules-core: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update (Cen Zhang) | 7.8 | 0.0013 | | | [CVE-2026-64407](https://patchblox.com/security/data/cve/CVE-2026-64407.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware... | 7.1 | 0.0013 | | | [CVE-2026-68189](https://patchblox.com/security/data/cve/CVE-2026-68189.md) | High | Bluetooth: hci_sync: Protect UUID list traversal | 7.8 | 0.0012 | | | [CVE-2026-64427](https://patchblox.com/security/data/cve/CVE-2026-64427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short... | 7.8 | 0.0012 | | | [CVE-2026-46091](https://patchblox.com/security/data/cve/CVE-2026-46091.md) | High | media: rc: igorplugusb: heed coherency rules | 7.1 | 0.0012 | | | [CVE-2026-64316](https://patchblox.com/security/data/cve/CVE-2026-64316.md) | High | crypto: caam - use print_hex_dump_devel to guard key hex dumps | 7.1 | 0.0012 | | | [CVE-2026-64496](https://patchblox.com/security/data/cve/CVE-2026-64496.md) | High | iio: event: Fix event FIFO reset race | 7.1 | 0.0012 | | | [CVE-2026-64222](https://patchblox.com/security/data/cve/CVE-2026-64222.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack o... | 7.0 | 0.0012 | | | [CVE-2026-68116](https://patchblox.com/security/data/cve/CVE-2026-68116.md) | High | vxlan: mdb: Fix source list corruption on a failed replace | 7.9 | 0.0012 | | | [CVE-2026-64581](https://patchblox.com/security/data/cve/CVE-2026-64581.md) | High | xfrm: fix sk_dst_cache double-free in xfrm_user_policy() | 7.8 | 0.0012 | | | [CVE-2026-68446](https://patchblox.com/security/data/cve/CVE-2026-68446.md) | High | drm/vmwgfx: Validate vmw_surface_metadata::array_size | 7.8 | 0.0012 | | | [CVE-2026-64576](https://patchblox.com/security/data/cve/CVE-2026-64576.md) | High | nexthop: initialize extack in nh_res_bucket_migrate() | 7.1 | 0.0012 | | | [CVE-2026-74582](https://patchblox.com/security/data/cve/CVE-2026-74582.md) | High | packet: use consistent hard_header_len in non-ring send paths | 9.8 | 0.0012 | | | [CVE-2026-53110](https://patchblox.com/security/data/cve/CVE-2026-53110.md) | High | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | 7.8 | 0.0012 | | | [CVE-2026-64558](https://patchblox.com/security/data/cve/CVE-2026-64558.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler im... | 7.8 | 0.0012 | | | [CVE-2026-64559](https://patchblox.com/security/data/cve/CVE-2026-64559.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioct... | 7.8 | 0.0012 | | | [CVE-2026-64568](https://patchblox.com/security/data/cve/CVE-2026-64568.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp doubl... | 7.8 | 0.0012 | | | [CVE-2026-64585](https://patchblox.com/security/data/cve/CVE-2026-64585.md) | High | can: esd_usb: kill anchored URBs before freeing netdevs | 7.8 | 0.0012 | | | [CVE-2026-31658](https://patchblox.com/security/data/cve/CVE-2026-31658.md) | High | net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() | 7.1 | 0.0012 | | | [CVE-2026-64245](https://patchblox.com/security/data/cve/CVE-2026-64245.md) | High | fbdev: modedb: fix a possible UAF in fb_find_mode() | 7.8 | 0.0012 | | | [CVE-2026-64420](https://patchblox.com/security/data/cve/CVE-2026-64420.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until prob... | 7.0 | 0.0012 | | | [CVE-2026-64192](https://patchblox.com/security/data/cve/CVE-2026-64192.md) | High | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | 7.8 | 0.0012 | | | [CVE-2026-53089](https://patchblox.com/security/data/cve/CVE-2026-53089.md) | High | bpf: Fix use-after-free in offloaded map/prog info fill | 7.8 | 0.0012 | | | [CVE-2026-64188](https://patchblox.com/security/data/cve/CVE-2026-64188.md) | High | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 7.8 | 0.0012 | | | [CVE-2026-64246](https://patchblox.com/security/data/cve/CVE-2026-64246.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-afte... | 7.8 | 0.0012 | | | [CVE-2026-64249](https://patchblox.com/security/data/cve/CVE-2026-64249.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_region... | 7.8 | 0.0012 | | | [CVE-2026-64583](https://patchblox.com/security/data/cve/CVE-2026-64583.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_w... | 7.8 | 0.0012 | | | [CVE-2026-64584](https://patchblox.com/security/data/cve/CVE-2026-64584.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work befo... | 7.8 | 0.0012 | | | [CVE-2026-64599](https://patchblox.com/security/data/cve/CVE-2026-64599.md) | High | crypto: amlogic - avoid double cleanup in meson_crypto_probe() | 7.8 | 0.0012 | | | [CVE-2026-74563](https://patchblox.com/security/data/cve/CVE-2026-74563.md) | High | rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() | 7.8 | 0.0012 | | | [CVE-2026-53076](https://patchblox.com/security/data/cve/CVE-2026-53076.md) | High | kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695). | 7.1 | 0.0012 | | | [CVE-2026-64237](https://patchblox.com/security/data/cve/CVE-2026-64237.md) | High | Input: elan_i2c - validate firmware size before use | 7.1 | 0.0012 | | | [CVE-2026-74567](https://patchblox.com/security/data/cve/CVE-2026-74567.md) | High | keys: fix out-of-bounds read in keyring_get_key_chunk() | 7.1 | 0.0012 | | | [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0012 | | | [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). | 7.8 | 0.0011 | | | [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 | | | [CVE-2026-64375](https://patchblox.com/security/data/cve/CVE-2026-64375.md) | High | proc: protect ptrace_may_access() with exec_update_lock (FD links) | 7.8 | 0.0011 | | | [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 | | | [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 | | | [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 | | | [CVE-2026-64378](https://patchblox.com/security/data/cve/CVE-2026-64378.md) | High | writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() | 8.8 | 0.0010 | | | [CVE-2026-68107](https://patchblox.com/security/data/cve/CVE-2026-68107.md) | High | drm/amdgpu/vcn4: avoid rereading IB param length | 8.8 | 0.0010 | | | [CVE-2026-64004](https://patchblox.com/security/data/cve/CVE-2026-64004.md) | High | kernel-64kb: net/iucv: fix locking in .getsockopt (bsc#1273804). | 7.8 | 0.0010 | | | [CVE-2026-64005](https://patchblox.com/security/data/cve/CVE-2026-64005.md) | High | kernel-64kb: net/smc: Do not re-initialize smc hashtables (bsc#1273831). | 7.8 | 0.0010 | | | [CVE-2026-64112](https://patchblox.com/security/data/cve/CVE-2026-64112.md) | High | rbd: eliminate a race in lock_dwork draining on unmap | 7.8 | 0.0010 | | | [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0010 | | | [CVE-2026-64029](https://patchblox.com/security/data/cve/CVE-2026-64029.md) | High | kernel-default: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766). | 8.8 | 0.0010 | | | [CVE-2026-52935](https://patchblox.com/security/data/cve/CVE-2026-52935.md) | High | xfrm: espintcp: do not reuse an in-progress partial send | 8.8 | 0.0010 | | | [CVE-2026-68417](https://patchblox.com/security/data/cve/CVE-2026-68417.md) | High | RDMA/siw: publish QP after initialization | 7.8 | 0.0010 | | | [CVE-2026-43163](https://patchblox.com/security/data/cve/CVE-2026-43163.md) | High | kernel-64kb: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335). | 8.1 | 0.0009 | | | [CVE-2026-64257](https://patchblox.com/security/data/cve/CVE-2026-64257.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.3 | 0.0066 | | | [CVE-2024-57841](https://patchblox.com/security/data/cve/CVE-2024-57841.md) | Routine | kernel-default: CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). | 5.5 | 0.0022 | | | [CVE-2026-72341](https://patchblox.com/security/data/cve/CVE-2026-72341.md) | Routine | net/mlx5e: Fix publication race for priv->channel_stats[] | 4.7 | 0.0022 | | | [CVE-2026-68215](https://patchblox.com/security/data/cve/CVE-2026-68215.md) | Routine | media: radio-si476x: Unregister v4l2_device on probe failure | 5.5 | 0.0022 | | | [CVE-2026-68217](https://patchblox.com/security/data/cve/CVE-2026-68217.md) | Routine | media: pwc: Drain fill_buf on start_streaming() failure | 5.5 | 0.0022 | | | [CVE-2026-68223](https://patchblox.com/security/data/cve/CVE-2026-68223.md) | Routine | media: meson: vdec: Fix memory leak in error path of vdec_open | 5.5 | 0.0022 | | | [CVE-2026-68226](https://patchblox.com/security/data/cve/CVE-2026-68226.md) | Routine | media: cx23885: add ioremap return check and cleanup | 5.5 | 0.0022 | | | [CVE-2026-68227](https://patchblox.com/security/data/cve/CVE-2026-68227.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers... | 5.5 | 0.0022 | | | [CVE-2026-68231](https://patchblox.com/security/data/cve/CVE-2026-68231.md) | Routine | media: airspy: Return queued buffers on start_streaming() failure | 5.5 | 0.0022 | | | [CVE-2026-68277](https://patchblox.com/security/data/cve/CVE-2026-68277.md) | Routine | drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers | 5.5 | 0.0022 | | | [CVE-2026-68405](https://patchblox.com/security/data/cve/CVE-2026-68405.md) | Routine | wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock | 5.5 | 0.0022 | | | [CVE-2026-72307](https://patchblox.com/security/data/cve/CVE-2026-72307.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72308](https://patchblox.com/security/data/cve/CVE-2026-72308.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-74395](https://patchblox.com/security/data/cve/CVE-2026-74395.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-68184](https://patchblox.com/security/data/cve/CVE-2026-68184.md) | Routine | cdrom: fix stack out-of-bounds read in CDROMVOLCTRL | 5.5 | 0.0022 | | | [CVE-2026-68197](https://patchblox.com/security/data/cve/CVE-2026-68197.md) | Routine | wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper | 5.5 | 0.0022 | | | [CVE-2026-68250](https://patchblox.com/security/data/cve/CVE-2026-68250.md) | Routine | drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() | 5.5 | 0.0022 | | | [CVE-2026-68304](https://patchblox.com/security/data/cve/CVE-2026-68304.md) | Routine | wifi: brcmfmac: fix 802.1X-SHA256 call trace warning | 5.5 | 0.0022 | | | [CVE-2026-68313](https://patchblox.com/security/data/cve/CVE-2026-68313.md) | Routine | tipc: fix infinite loop in __tipc_nl_compat_dumpit | 5.5 | 0.0022 | | | [CVE-2026-68322](https://patchblox.com/security/data/cve/CVE-2026-68322.md) | Routine | rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled | 5.5 | 0.0022 | | | [CVE-2026-68410](https://patchblox.com/security/data/cve/CVE-2026-68410.md) | Routine | wifi: libertas: fix memory leak in helper_firmware_cb() | 5.5 | 0.0022 | | | [CVE-2026-68205](https://patchblox.com/security/data/cve/CVE-2026-68205.md) | Routine | media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() | 5.5 | 0.0022 | | | [CVE-2026-68251](https://patchblox.com/security/data/cve/CVE-2026-68251.md) | Routine | drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() | 5.5 | 0.0022 | | | [CVE-2026-68422](https://patchblox.com/security/data/cve/CVE-2026-68422.md) | Routine | btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() | 5.5 | 0.0022 | | | [CVE-2026-72467](https://patchblox.com/security/data/cve/CVE-2026-72467.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-68303](https://patchblox.com/security/data/cve/CVE-2026-68303.md) | Routine | drm/vc4: hvs/v3d: Fix null dereference in unbind | 5.5 | 0.0021 | | | [CVE-2026-63969](https://patchblox.com/security/data/cve/CVE-2026-63969.md) | Routine | kernel-64kb: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484). | 5.5 | 0.0021 | | | [CVE-2026-68194](https://patchblox.com/security/data/cve/CVE-2026-68194.md) | Routine | wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses | 5.5 | 0.0021 | | | [CVE-2026-68195](https://patchblox.com/security/data/cve/CVE-2026-68195.md) | Routine | wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses | 5.5 | 0.0021 | | | [CVE-2026-68386](https://patchblox.com/security/data/cve/CVE-2026-68386.md) | Routine | bpf, sockmap: Reject unhashed UDP sockets on sockmap update | 5.5 | 0.0021 | | | [CVE-2026-68369](https://patchblox.com/security/data/cve/CVE-2026-68369.md) | Routine | usb: gadget: printer: fix infinite loop in printer_read() | 5.5 | 0.0021 | | | [CVE-2026-68339](https://patchblox.com/security/data/cve/CVE-2026-68339.md) | Routine | Bluetooth: btusb: validate Realtek vendor event length | 5.5 | 0.0021 | | | [CVE-2026-68346](https://patchblox.com/security/data/cve/CVE-2026-68346.md) | Routine | kernel-uek64k-modules-core: ALSA: hda: cs35l41: validate and free ACPI mute object (Guangshuo Li) | 5.5 | 0.0021 | | | [CVE-2026-72132](https://patchblox.com/security/data/cve/CVE-2026-72132.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-68220](https://patchblox.com/security/data/cve/CVE-2026-68220.md) | Routine | media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe | 3.3 | 0.0021 | | | [CVE-2026-64517](https://patchblox.com/security/data/cve/CVE-2026-64517.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in err... | n/a | 0.0021 | | | [CVE-2026-68261](https://patchblox.com/security/data/cve/CVE-2026-68261.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvr_vm_co... | n/a | 0.0021 | | | [CVE-2026-68269](https://patchblox.com/security/data/cve/CVE-2026-68269.md) | Routine | drm/i915/gem: Add missing nospec on parallel submit slot | 5.5 | 0.0021 | | | [CVE-2026-72032](https://patchblox.com/security/data/cve/CVE-2026-72032.md) | Routine | kernel-uek64k-modules-core: net/mlx5: HWS, fix matcher leak on resize target setup failure (Dawei Feng) | 5.5 | 0.0021 | | | [CVE-2026-68312](https://patchblox.com/security/data/cve/CVE-2026-68312.md) | Routine | cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths | 3.3 | 0.0021 | | Showing 500 of 662 CVEs; the web page lists them all. --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.