{ "fix": "SUSE-SU-2026:4254-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4254-1", "summary": "SUSE-SU-2026:4254-1, released October 7, 2026, fixes 661 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 10 packages", "released": "2026-10-07T22:31:36Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-68160, rated Critical", "supported": true, "cveCount": 661, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00873, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:4254-1", "appliesTo": [ { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-azure", "productUrl": "https://patchblox.com/security/product/linux/kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1.150700.17.45.1", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-livepatch-SLE15-SP7_Update_21", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-21", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.81.1", "supported": true } ], "cves": [ { "cveId": "CVE-2026-68160", "url": "https://patchblox.com/security/cve/CVE-2026-68160", "title": "ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00772, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72296", "url": "https://patchblox.com/security/cve/CVE-2026-72296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64541", "url": "https://patchblox.com/security/cve/CVE-2026-64541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00565, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64056", "url": "https://patchblox.com/security/cve/CVE-2026-64056", "title": "kernel-64kb: CVE-2026-64055, net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64125", "url": "https://patchblox.com/security/cve/CVE-2026-64125", "title": "kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68127", "url": "https://patchblox.com/security/cve/CVE-2026-68127", "title": "ila: reload IPv6 header after pskb_may_pull in checksum adjust", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72494", "url": "https://patchblox.com/security/cve/CVE-2026-72494", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with comp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64055", "url": "https://patchblox.com/security/cve/CVE-2026-64055", "title": "kernel-64kb: CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64033", "url": "https://patchblox.com/security/cve/CVE-2026-64033", "title": "kernel-64kb: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74345", "url": "https://patchblox.com/security/cve/CVE-2026-74345", "title": "RDMA/siw: Fix endpoint/socket association handling", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72463", "url": "https://patchblox.com/security/cve/CVE-2026-72463", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resum...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00444, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53309", "url": "https://patchblox.com/security/cve/CVE-2026-53309", "title": "ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53260", "url": "https://patchblox.com/security/cve/CVE-2026-53260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68354", "url": "https://patchblox.com/security/cve/CVE-2026-68354", "title": "firewire: net: Fix fragmented datagram reassembly", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68402", "url": "https://patchblox.com/security/cve/CVE-2026-68402", "title": "wifi: cfg80211: bound element ID read when checking non-inheritance", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68360", "url": "https://patchblox.com/security/cve/CVE-2026-68360", "title": "hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68359", "url": "https://patchblox.com/security/cve/CVE-2026-68359", "title": "hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68212", "url": "https://patchblox.com/security/cve/CVE-2026-68212", "title": "media: saa7134: Fix a possible memory leak in saa7134_video_init1", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68214", "url": "https://patchblox.com/security/cve/CVE-2026-68214", "title": "media: rtl2832: fix use-after-free in rtl2832_remove()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68218", "url": "https://patchblox.com/security/cve/CVE-2026-68218", "title": "media: pci: dm1105: Free allocated workqueue", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68180", "url": "https://patchblox.com/security/cve/CVE-2026-68180", "title": "intel_th: fix MSC output device reference leak", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68207", "url": "https://patchblox.com/security/cve/CVE-2026-68207", "title": "media: ti: vpe: unwind v4l2 device registration on probe error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68166", "url": "https://patchblox.com/security/cve/CVE-2026-68166", "title": "userfaultfd: prevent registration of special VMAs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80654", "url": "https://patchblox.com/security/cve/CVE-2026-80654", "title": "soc: xilinx: Shutdown and free rx mailbox channel", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68349", "url": "https://patchblox.com/security/cve/CVE-2026-68349", "title": "wifi: carl9170: fix buffer overflow in rx_stream failover path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63881", "url": "https://patchblox.com/security/cve/CVE-2026-63881", "title": "drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72288", "url": "https://patchblox.com/security/cve/CVE-2026-72288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64565", "url": "https://patchblox.com/security/cve/CVE-2026-64565", "title": "Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68406", "url": "https://patchblox.com/security/cve/CVE-2026-68406", "title": "wifi: cfg80211: validate PMSR FTM preamble range", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68357", "url": "https://patchblox.com/security/cve/CVE-2026-68357", "title": "watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68210", "url": "https://patchblox.com/security/cve/CVE-2026-68210", "title": "media: stm32: dcmi: unregister notifier on probe failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68310", "url": "https://patchblox.com/security/cve/CVE-2026-68310", "title": "wifi: mt76: mt7915: guard HE capability lookups", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68324", "url": "https://patchblox.com/security/cve/CVE-2026-68324", "title": "iommu/intel: Fix out-of-bounds memset in dmar_latency_disable()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68407", "url": "https://patchblox.com/security/cve/CVE-2026-68407", "title": "wifi: nl80211: free RNR data on MBSSID mismatch", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68399", "url": "https://patchblox.com/security/cve/CVE-2026-68399", "title": "bpf: Fix UAF in sock clone early bailouts", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63828", "url": "https://patchblox.com/security/cve/CVE-2026-63828", "title": "apparmor: mediate the implicit connect of TCP fast open sendmsg", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68340", "url": "https://patchblox.com/security/cve/CVE-2026-68340", "title": "hwmon: occ: validate poll response sensor blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68391", "url": "https://patchblox.com/security/cve/CVE-2026-68391", "title": "Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68377", "url": "https://patchblox.com/security/cve/CVE-2026-68377", "title": "net/sched: act_tunnel_key: Defer dst_release to RCU callback", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68236", "url": "https://patchblox.com/security/cve/CVE-2026-68236", "title": "drm/amd/display: set new_stream to NULL after release", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63827", "url": "https://patchblox.com/security/cve/CVE-2026-63827", "title": "apparmor: fix use-after-free in rawdata dedup loop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63999", "url": "https://patchblox.com/security/cve/CVE-2026-63999", "title": "ethtool: rss: fix indir_table and hkey leak on get_rxfh failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53077", "url": "https://patchblox.com/security/cve/CVE-2026-53077", "title": "net/rds: Restrict use of RDS/IB to the initial network namespace", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68143", "url": "https://patchblox.com/security/cve/CVE-2026-68143", "title": "net: slip: serialize receive against buffer reallocation", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52929", "url": "https://patchblox.com/security/cve/CVE-2026-52929", "title": "sctp: stream: fully roll back denied add-stream state", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00873, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63887", "url": "https://patchblox.com/security/cve/CVE-2026-63887", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63888", "url": "https://patchblox.com/security/cve/CVE-2026-63888", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Fix CRC overread and double-...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68159", "url": "https://patchblox.com/security/cve/CVE-2026-68159", "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72069", "url": "https://patchblox.com/security/cve/CVE-2026-72069", "title": "kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684]", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72473", "url": "https://patchblox.com/security/cve/CVE-2026-72473", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64268", "url": "https://patchblox.com/security/cve/CVE-2026-64268", "title": "RDMA/siw: bound Read Response placement to the RREAD length", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64269", "url": "https://patchblox.com/security/cve/CVE-2026-64269", "title": "RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63886", "url": "https://patchblox.com/security/cve/CVE-2026-63886", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00711, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68155", "url": "https://patchblox.com/security/cve/CVE-2026-68155", "title": "libceph: Reject monmaps advertising zero monitors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64303", "url": "https://patchblox.com/security/cve/CVE-2026-64303", "title": "spi: fsl-lpspi: terminate the RX channel on TX prepare failure path", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68161", "url": "https://patchblox.com/security/cve/CVE-2026-68161", "title": "sctp: close UDP tunnel sockets during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46195", "url": "https://patchblox.com/security/cve/CVE-2026-46195", "title": "smb: client: validate dacloffset before building DACL pointers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72464", "url": "https://patchblox.com/security/cve/CVE-2026-72464", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72254", "url": "https://patchblox.com/security/cve/CVE-2026-72254", "title": "kernel-uek64k-modules-core: netfilter: nft_fib: reject fib expression on the netdev egress hook (Theodor Arsenij Larionov-Trichkine)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72317", "url": "https://patchblox.com/security/cve/CVE-2026-72317", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72046", "url": "https://patchblox.com/security/cve/CVE-2026-72046", "title": "kernel-uek64k-modules-core: gve: fix header buffer corruption with header-split and HW-GRO (Ankit Garg)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72221", "url": "https://patchblox.com/security/cve/CVE-2026-72221", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72222", "url": "https://patchblox.com/security/cve/CVE-2026-72222", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63972", "url": "https://patchblox.com/security/cve/CVE-2026-63972", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00592, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53228", "url": "https://patchblox.com/security/cve/CVE-2026-53228", "title": "ipv6: sit: reload inner IPv6 header after GSO offloads", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64577", "url": "https://patchblox.com/security/cve/CVE-2026-64577", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74394", "url": "https://patchblox.com/security/cve/CVE-2026-74394", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68136", "url": "https://patchblox.com/security/cve/CVE-2026-68136", "title": "net: gro: fix double aggregation of flush-marked skbs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00539, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43125", "url": "https://patchblox.com/security/cve/CVE-2026-43125", "title": "dlm: validate length in dlm_search_rsb_tree", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00538, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68137", "url": "https://patchblox.com/security/cve/CVE-2026-68137", "title": "net/x25: fix use-after-free in x25_kill_by_neigh()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63808", "url": "https://patchblox.com/security/cve/CVE-2026-63808", "title": "kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry()", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64007", "url": "https://patchblox.com/security/cve/CVE-2026-64007", "title": "kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74495", "url": "https://patchblox.com/security/cve/CVE-2026-74495", "title": "igbvf: Fix leak in TX DMA error cleanup", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63992", "url": "https://patchblox.com/security/cve/CVE-2026-63992", "title": "kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68343", "url": "https://patchblox.com/security/cve/CVE-2026-68343", "title": "smb: client: validate DFS referral PathConsumed", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63801", "url": "https://patchblox.com/security/cve/CVE-2026-63801", "title": "tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68129", "url": "https://patchblox.com/security/cve/CVE-2026-68129", "title": "gve: fix Rx queue stall on alloc failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68299", "url": "https://patchblox.com/security/cve/CVE-2026-68299", "title": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64048", "url": "https://patchblox.com/security/cve/CVE-2026-64048", "title": "kernel-default: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484).", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64102", "url": "https://patchblox.com/security/cve/CVE-2026-64102", "title": "kernel-64kb: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516).", "priority": "High", "severity": "MODERATE", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68082", "url": "https://patchblox.com/security/cve/CVE-2026-68082", "title": "libceph: fix two unsafe bare decodes in decode_lockers()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68426", "url": "https://patchblox.com/security/cve/CVE-2026-68426", "title": "xfrm: fix stale skb-\u003Eprev after async crypto steals a GSO segment", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46115", "url": "https://patchblox.com/security/cve/CVE-2026-46115", "title": "block: add pgmap check to biovec_phys_mergeable", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64000", "url": "https://patchblox.com/security/cve/CVE-2026-64000", "title": "kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74269", "url": "https://patchblox.com/security/cve/CVE-2026-74269", "title": "bnxt: fix head underflow on XDP head-grow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74474", "url": "https://patchblox.com/security/cve/CVE-2026-74474", "title": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74692", "url": "https://patchblox.com/security/cve/CVE-2026-74692", "title": "net/smc: fix TOCTOU race between smc_listen_out() and listener close", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53264", "url": "https://patchblox.com/security/cve/CVE-2026-53264", "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74550", "url": "https://patchblox.com/security/cve/CVE-2026-74550", "title": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74695", "url": "https://patchblox.com/security/cve/CVE-2026-74695", "title": "netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68302", "url": "https://patchblox.com/security/cve/CVE-2026-68302", "title": "amt: re-read skb header pointers after every pull", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64148", "url": "https://patchblox.com/security/cve/CVE-2026-64148", "title": "kernel-64kb: pds_core: check health in devcmd wait (bsc#1273956).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52946", "url": "https://patchblox.com/security/cve/CVE-2026-52946", "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64383", "url": "https://patchblox.com/security/cve/CVE-2026-64383", "title": "smb: client: fix double-free in SMB2_flush() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64384", "url": "https://patchblox.com/security/cve/CVE-2026-64384", "title": "smb: client: fix change notify replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64385", "url": "https://patchblox.com/security/cve/CVE-2026-64385", "title": "smb: client: fix double-free in SMB2_ioctl() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64386", "url": "https://patchblox.com/security/cve/CVE-2026-64386", "title": "smb: client: fix query_info() replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64387", "url": "https://patchblox.com/security/cve/CVE-2026-64387", "title": "smb: client: fix query directory replay double-free", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31557", "url": "https://patchblox.com/security/cve/CVE-2026-31557", "title": "nvmet: move async event work off nvmet-wq", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00451, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68352", "url": "https://patchblox.com/security/cve/CVE-2026-68352", "title": "wifi: ath6kl: fix OOB read from firmware IE lengths in connect event", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68196", "url": "https://patchblox.com/security/cve/CVE-2026-68196", "title": "wifi: wilc1000: validate assoc response length before subtracting header", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68192", "url": "https://patchblox.com/security/cve/CVE-2026-68192", "title": "wifi: brcmfmac: make release_scratchbuffers idempotent", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00408, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64136", "url": "https://patchblox.com/security/cve/CVE-2026-64136", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nsmb: client: protect tc_count increment in smb2_f...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00407, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74556", "url": "https://patchblox.com/security/cve/CVE-2026-74556", "title": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72469", "url": "https://patchblox.com/security/cve/CVE-2026-72469", "title": "xprtrdma: Fix ep kref imbalance on ADDR_CHANGE", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68199", "url": "https://patchblox.com/security/cve/CVE-2026-68199", "title": "wifi: ath6kl: fix OOB access from firmware ADDBA window size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64597", "url": "https://patchblox.com/security/cve/CVE-2026-64597", "title": "smb: client: fix double-free in SMB2_close() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63889", "url": "https://patchblox.com/security/cve/CVE-2026-63889", "title": "kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64382", "url": "https://patchblox.com/security/cve/CVE-2026-64382", "title": "smb: client: fix double-free in SMB2_open() replay", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63925", "url": "https://patchblox.com/security/cve/CVE-2026-63925", "title": "kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68124", "url": "https://patchblox.com/security/cve/CVE-2026-68124", "title": "mctp: serial: handle zero-length frames to prevent rx buffer overflow", "priority": "High", "severity": "Important", "cvss": 9.6, "epss": 0.00343, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53180", "url": "https://patchblox.com/security/cve/CVE-2026-53180", "title": "kernel-64kb: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63980", "url": "https://patchblox.com/security/cve/CVE-2026-63980", "title": "kernel-64kb: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63944", "url": "https://patchblox.com/security/cve/CVE-2026-63944", "title": "kernel-default: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00334, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64445", "url": "https://patchblox.com/security/cve/CVE-2026-64445", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68125", "url": "https://patchblox.com/security/cve/CVE-2026-68125", "title": "mac802154: llsec: reject frames shorter than the authentication tag", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68470", "url": "https://patchblox.com/security/cve/CVE-2026-68470", "title": "wifi: mac80211: validate extension-frame layout before RX", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64178", "url": "https://patchblox.com/security/cve/CVE-2026-64178", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52920", "url": "https://patchblox.com/security/cve/CVE-2026-52920", "title": "netfilter: xt_policy: fix strict mode inbound policy matching", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64442", "url": "https://patchblox.com/security/cve/CVE-2026-64442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64444", "url": "https://patchblox.com/security/cve/CVE-2026-64444", "title": "staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68353", "url": "https://patchblox.com/security/cve/CVE-2026-68353", "title": "wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64547", "url": "https://patchblox.com/security/cve/CVE-2026-64547", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43213", "url": "https://patchblox.com/security/cve/CVE-2026-43213", "title": "wifi: rtw89: pci: validate sequence number of TX release report", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64088", "url": "https://patchblox.com/security/cve/CVE-2026-64088", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64443", "url": "https://patchblox.com/security/cve/CVE-2026-64443", "title": "staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.0028, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64598", "url": "https://patchblox.com/security/cve/CVE-2026-64598", "title": "smb/client: Fix error code in smb2_aead_req_alloc()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23230", "url": "https://patchblox.com/security/cve/CVE-2026-23230", "title": "smb: client: split cached_fid bitfields to avoid shared-byte RMW races", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64540", "url": "https://patchblox.com/security/cve/CVE-2026-64540", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68373", "url": "https://patchblox.com/security/cve/CVE-2026-68373", "title": "wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64406", "url": "https://patchblox.com/security/cve/CVE-2026-64406", "title": "Bluetooth: fix UAF in bt_accept_dequeue()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63891", "url": "https://patchblox.com/security/cve/CVE-2026-63891", "title": "kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64440", "url": "https://patchblox.com/security/cve/CVE-2026-64440", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64403", "url": "https://patchblox.com/security/cve/CVE-2026-64403", "title": "Bluetooth: L2CAP: validate option length before reading conf opt value", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64408", "url": "https://patchblox.com/security/cve/CVE-2026-64408", "title": "Bluetooth: bnep: pin L2CAP connection during netdev registration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68091", "url": "https://patchblox.com/security/cve/CVE-2026-68091", "title": "HID: wacom: stop hardware after post-start probe failures", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68326", "url": "https://patchblox.com/security/cve/CVE-2026-68326", "title": "wifi: mwifiex: bound uAP association event IEs to the event buffer", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68397", "url": "https://patchblox.com/security/cve/CVE-2026-68397", "title": "net/iucv: take a reference on the socket found in afiucv_hs_rcv()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64536", "url": "https://patchblox.com/security/cve/CVE-2026-64536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74537", "url": "https://patchblox.com/security/cve/CVE-2026-74537", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_rea...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64434", "url": "https://patchblox.com/security/cve/CVE-2026-64434", "title": "Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64554", "url": "https://patchblox.com/security/cve/CVE-2026-64554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74488", "url": "https://patchblox.com/security/cve/CVE-2026-74488", "title": "wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68389", "url": "https://patchblox.com/security/cve/CVE-2026-68389", "title": "Bluetooth: hci_qca: Clear memdump state on invalid dump size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74509", "url": "https://patchblox.com/security/cve/CVE-2026-74509", "title": "Bluetooth: hci_sync: Fix advertising data UAFs", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00249, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68278", "url": "https://patchblox.com/security/cve/CVE-2026-68278", "title": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40022", "url": "https://patchblox.com/security/cve/CVE-2025-40022", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64515", "url": "https://patchblox.com/security/cve/CVE-2026-64515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68480", "url": "https://patchblox.com/security/cve/CVE-2026-68480", "title": "x86/bugs: Make Safe-RET robust against interrupt injection", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68398", "url": "https://patchblox.com/security/cve/CVE-2026-68398", "title": "ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68414", "url": "https://patchblox.com/security/cve/CVE-2026-68414", "title": "wifi: cfg80211: cancel sched scan results work on unregister", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31663", "url": "https://patchblox.com/security/cve/CVE-2026-31663", "title": "xfrm: hold dev ref until after transport_finish NF_HOOK", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68138", "url": "https://patchblox.com/security/cve/CVE-2026-68138", "title": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64452", "url": "https://patchblox.com/security/cve/CVE-2026-64452", "title": "6lowpan: fix NHC entry use-after-free on error path", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68351", "url": "https://patchblox.com/security/cve/CVE-2026-68351", "title": "wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68188", "url": "https://patchblox.com/security/cve/CVE-2026-68188", "title": "Bluetooth: RFCOMM: Fix session UAF in set_termios", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68368", "url": "https://patchblox.com/security/cve/CVE-2026-68368", "title": "usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68181", "url": "https://patchblox.com/security/cve/CVE-2026-68181", "title": "mei: bus: access mei_device under device_lock on cleanup", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68182", "url": "https://patchblox.com/security/cve/CVE-2026-68182", "title": "comedi: comedi_parport: deal with premature interrupt", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68286", "url": "https://patchblox.com/security/cve/CVE-2026-68286", "title": "drop_monitor: perform u64_stats updates under IRQ-disabled section", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63810", "url": "https://patchblox.com/security/cve/CVE-2026-63810", "title": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68193", "url": "https://patchblox.com/security/cve/CVE-2026-68193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53365", "url": "https://patchblox.com/security/cve/CVE-2026-53365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64010", "url": "https://patchblox.com/security/cve/CVE-2026-64010", "title": "kernel-default: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882).", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68085", "url": "https://patchblox.com/security/cve/CVE-2026-68085", "title": "Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63926", "url": "https://patchblox.com/security/cve/CVE-2026-63926", "title": "kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68093", "url": "https://patchblox.com/security/cve/CVE-2026-68093", "title": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72495", "url": "https://patchblox.com/security/cve/CVE-2026-72495", "title": "RDMA/bnxt_re: Avoid repeated requests to allocate WC pages", "priority": "High", "severity": "Low", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64039", "url": "https://patchblox.com/security/cve/CVE-2026-64039", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64484", "url": "https://patchblox.com/security/cve/CVE-2026-64484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68363", "url": "https://patchblox.com/security/cve/CVE-2026-68363", "title": "wifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request", "priority": "High", "severity": "Low", "cvss": 8.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68366", "url": "https://patchblox.com/security/cve/CVE-2026-68366", "title": "usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64470", "url": "https://patchblox.com/security/cve/CVE-2026-64470", "title": "Bluetooth: btusb: fix use-after-free on marvell probe failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64471", "url": "https://patchblox.com/security/cve/CVE-2026-64471", "title": "Bluetooth: btusb: fix use-after-free on registration failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68135", "url": "https://patchblox.com/security/cve/CVE-2026-68135", "title": "net: hip04: fix RX buffer leak on build_skb failure", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68350", "url": "https://patchblox.com/security/cve/CVE-2026-68350", "title": "wifi: carl9170: fix OOB read from off-by-two in TX status handler", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68365", "url": "https://patchblox.com/security/cve/CVE-2026-68365", "title": "USB: serial: io_edgeport: cap received transmit credits", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64483", "url": "https://patchblox.com/security/cve/CVE-2026-64483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64570", "url": "https://patchblox.com/security/cve/CVE-2026-64570", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72262", "url": "https://patchblox.com/security/cve/CVE-2026-72262", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74584", "url": "https://patchblox.com/security/cve/CVE-2026-74584", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63860", "url": "https://patchblox.com/security/cve/CVE-2026-63860", "title": "kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68289", "url": "https://patchblox.com/security/cve/CVE-2026-68289", "title": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64513", "url": "https://patchblox.com/security/cve/CVE-2026-64513", "title": "KVM: x86: Unconditionally recompute CR8 intercept on PPR update", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68202", "url": "https://patchblox.com/security/cve/CVE-2026-68202", "title": "ALSA: seq: close a re-opened queue timer in the destructor", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68206", "url": "https://patchblox.com/security/cve/CVE-2026-68206", "title": "media: v4l2-ctrls: validate HEVC active reference counts", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68213", "url": "https://patchblox.com/security/cve/CVE-2026-68213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68216", "url": "https://patchblox.com/security/cve/CVE-2026-68216", "title": "media: pwc: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68088", "url": "https://patchblox.com/security/cve/CVE-2026-68088", "title": "usb: gadget: function: rndis: add length check to response query", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64503", "url": "https://patchblox.com/security/cve/CVE-2026-64503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63970", "url": "https://patchblox.com/security/cve/CVE-2026-63970", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64286", "url": "https://patchblox.com/security/cve/CVE-2026-64286", "title": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64287", "url": "https://patchblox.com/security/cve/CVE-2026-64287", "title": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63898", "url": "https://patchblox.com/security/cve/CVE-2026-63898", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64481", "url": "https://patchblox.com/security/cve/CVE-2026-64481", "title": "ALSA: hda/cs35l41: Fix firmware load work teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68204", "url": "https://patchblox.com/security/cve/CVE-2026-68204", "title": "media: vivid: check for vb2_is_busy() when toggling caps", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68209", "url": "https://patchblox.com/security/cve/CVE-2026-68209", "title": "media: sun4i-csi: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63842", "url": "https://patchblox.com/security/cve/CVE-2026-63842", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63850", "url": "https://patchblox.com/security/cve/CVE-2026-63850", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68219", "url": "https://patchblox.com/security/cve/CVE-2026-68219", "title": "media: nxp: imx8-isi: Fix potential out-of-bounds issues", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63923", "url": "https://patchblox.com/security/cve/CVE-2026-63923", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nocteontx2-af: validate body pcifunc in rvu_mbox_h...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23227", "url": "https://patchblox.com/security/cve/CVE-2026-23227", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63920", "url": "https://patchblox.com/security/cve/CVE-2026-63920", "title": "kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72072", "url": "https://patchblox.com/security/cve/CVE-2026-72072", "title": "kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927]", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53366", "url": "https://patchblox.com/security/cve/CVE-2026-53366", "title": "ipv4: account for fraggap on the paged allocation path", "priority": "High", "severity": "Important", "cvss": 8.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64604", "url": "https://patchblox.com/security/cve/CVE-2026-64604", "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64276", "url": "https://patchblox.com/security/cve/CVE-2026-64276", "title": "Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64277", "url": "https://patchblox.com/security/cve/CVE-2026-64277", "title": "Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64304", "url": "https://patchblox.com/security/cve/CVE-2026-64304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63928", "url": "https://patchblox.com/security/cve/CVE-2026-63928", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64271", "url": "https://patchblox.com/security/cve/CVE-2026-64271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64273", "url": "https://patchblox.com/security/cve/CVE-2026-64273", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64274", "url": "https://patchblox.com/security/cve/CVE-2026-64274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contac...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64333", "url": "https://patchblox.com/security/cve/CVE-2026-64333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64582", "url": "https://patchblox.com/security/cve/CVE-2026-64582", "title": "RDMA/rxe: Fix a use-after-free problem in rxe_mmap", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68267", "url": "https://patchblox.com/security/cve/CVE-2026-68267", "title": "kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964]", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68306", "url": "https://patchblox.com/security/cve/CVE-2026-68306", "title": "wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64563", "url": "https://patchblox.com/security/cve/CVE-2026-64563", "title": "rhashtable: clear stale iter-\u003Ep on table restart", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64219", "url": "https://patchblox.com/security/cve/CVE-2026-64219", "title": "drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64593", "url": "https://patchblox.com/security/cve/CVE-2026-64593", "title": "btrfs: do not trim a device which is not writeable", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64323", "url": "https://patchblox.com/security/cve/CVE-2026-64323", "title": "udf: validate VAT header length against the VAT inode size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64504", "url": "https://patchblox.com/security/cve/CVE-2026-64504", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64346", "url": "https://patchblox.com/security/cve/CVE-2026-64346", "title": "usb: gadget: udc: Fix use-after-free in gadget_match_driver", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72500", "url": "https://patchblox.com/security/cve/CVE-2026-72500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmwar...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68260", "url": "https://patchblox.com/security/cve/CVE-2026-68260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx-\u003Elock before map...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63823", "url": "https://patchblox.com/security/cve/CVE-2026-63823", "title": "keys: Pin request_key_auth payload in instantiate paths", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64527", "url": "https://patchblox.com/security/cve/CVE-2026-64527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64243", "url": "https://patchblox.com/security/cve/CVE-2026-64243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bound...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64294", "url": "https://patchblox.com/security/cve/CVE-2026-64294", "title": "mm: do file ownership checks with the proper mount idmap", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68229", "url": "https://patchblox.com/security/cve/CVE-2026-68229", "title": "media: cedrus: skip invalid H.264 reference list entries", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64306", "url": "https://patchblox.com/security/cve/CVE-2026-64306", "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64574", "url": "https://patchblox.com/security/cve/CVE-2026-64574", "title": "wifi: mac80211: tear down new links on vif update error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64603", "url": "https://patchblox.com/security/cve/CVE-2026-64603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64247", "url": "https://patchblox.com/security/cve/CVE-2026-64247", "title": "KVM: x86: hyper-v: Bound the bank index when querying sparse banks", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64015", "url": "https://patchblox.com/security/cve/CVE-2026-64015", "title": "kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762).", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68179", "url": "https://patchblox.com/security/cve/CVE-2025-68179", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71075", "url": "https://patchblox.com/security/cve/CVE-2025-71075", "title": "scsi: aic94xx: fix use-after-free in device removal path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64118", "url": "https://patchblox.com/security/cve/CVE-2026-64118", "title": "kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53273", "url": "https://patchblox.com/security/cve/CVE-2026-53273", "title": "kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40199", "url": "https://patchblox.com/security/cve/CVE-2025-40199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68086", "url": "https://patchblox.com/security/cve/CVE-2026-68086", "title": "mm/khugepaged: write all dirty file folios when collapsing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64315", "url": "https://patchblox.com/security/cve/CVE-2026-64315", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39939", "url": "https://patchblox.com/security/cve/CVE-2025-39939", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68432", "url": "https://patchblox.com/security/cve/CVE-2026-68432", "title": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68253", "url": "https://patchblox.com/security/cve/CVE-2026-68253", "title": "drm/i915/hdcp: check streams[] bounds before overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64018", "url": "https://patchblox.com/security/cve/CVE-2026-64018", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74712", "url": "https://patchblox.com/security/cve/CVE-2026-74712", "title": "kernel-uek64k-modules-core: vdpa/mlx5: Fix buffer length in create_direct_keys() (Christian Borntraeger)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64552", "url": "https://patchblox.com/security/cve/CVE-2026-64552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63879", "url": "https://patchblox.com/security/cve/CVE-2026-63879", "title": "drm/amdgpu: fix amdgpu_hmm_range_get_pages", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64524", "url": "https://patchblox.com/security/cve/CVE-2026-64524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53059", "url": "https://patchblox.com/security/cve/CVE-2026-53059", "title": "dm log: fix out-of-bounds write due to region_count overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74510", "url": "https://patchblox.com/security/cve/CVE-2026-74510", "title": "Bluetooth: mgmt: fix UAF in pair command cancellation", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68293", "url": "https://patchblox.com/security/cve/CVE-2026-68293", "title": "net/mlx5: Fix MCIA register buffer overflow on 32 dword reads", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53091", "url": "https://patchblox.com/security/cve/CVE-2026-53091", "title": "net: pull headers in qdisc_pkt_len_segs_init()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53381", "url": "https://patchblox.com/security/cve/CVE-2026-53381", "title": "virtiofs: fix UAF on submount umount", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64084", "url": "https://patchblox.com/security/cve/CVE-2026-64084", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64085", "url": "https://patchblox.com/security/cve/CVE-2026-64085", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64086", "url": "https://patchblox.com/security/cve/CVE-2026-64086", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64463", "url": "https://patchblox.com/security/cve/CVE-2026-64463", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68222", "url": "https://patchblox.com/security/cve/CVE-2026-68222", "title": "media: msi2500: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68145", "url": "https://patchblox.com/security/cve/CVE-2026-68145", "title": "iomap: fix out-of-bounds bitmap_set() with zero-length range", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68257", "url": "https://patchblox.com/security/cve/CVE-2026-68257", "title": "drm/amdkfd: fix 32-bit overflow in CWSR total size calculation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68370", "url": "https://patchblox.com/security/cve/CVE-2026-68370", "title": "usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72496", "url": "https://patchblox.com/security/cve/CVE-2026-72496", "title": "RDMA/bnxt_re: Proper rollback if the ioremap fails", "priority": "High", "severity": "Moderate", "cvss": 9.2, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl \u003C 5 (bsc#1273742).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68108", "url": "https://patchblox.com/security/cve/CVE-2026-68108", "title": "drm/amdgpu/vce: fix integer overflow in image size", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68149", "url": "https://patchblox.com/security/cve/CVE-2026-68149", "title": "fs: preserve ACL_DONT_CACHE state in forget_cached_acl()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53223", "url": "https://patchblox.com/security/cve/CVE-2026-53223", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63937", "url": "https://patchblox.com/security/cve/CVE-2026-63937", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74516", "url": "https://patchblox.com/security/cve/CVE-2026-74516", "title": "KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53033", "url": "https://patchblox.com/security/cve/CVE-2026-53033", "title": "kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68284", "url": "https://patchblox.com/security/cve/CVE-2026-68284", "title": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68335", "url": "https://patchblox.com/security/cve/CVE-2026-68335", "title": "rds: drop incoming messages that cross network namespace boundaries", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64126", "url": "https://patchblox.com/security/cve/CVE-2026-64126", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64099", "url": "https://patchblox.com/security/cve/CVE-2026-64099", "title": "kernel-64kb: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64388", "url": "https://patchblox.com/security/cve/CVE-2026-64388", "title": "smb/client: fix chown/chgrp with SMB3 POSIX Extensions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68152", "url": "https://patchblox.com/security/cve/CVE-2026-68152", "title": "amt: fix use-after-free in AMT delayed works", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64073", "url": "https://patchblox.com/security/cve/CVE-2026-64073", "title": "kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53330", "url": "https://patchblox.com/security/cve/CVE-2026-53330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_ge...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64423", "url": "https://patchblox.com/security/cve/CVE-2026-64423", "title": "ipv4: igmp: remove multicast group from hash table on device destruction", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74481", "url": "https://patchblox.com/security/cve/CVE-2026-74481", "title": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46078", "url": "https://patchblox.com/security/cve/CVE-2026-46078", "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64411", "url": "https://patchblox.com/security/cve/CVE-2026-64411", "title": "netfilter: ebtables: terminate table name before find_table_lock()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64412", "url": "https://patchblox.com/security/cve/CVE-2026-64412", "title": "netfilter: ebtables: module names must be null-terminated", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68262", "url": "https://patchblox.com/security/cve/CVE-2026-68262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_se...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68348", "url": "https://patchblox.com/security/cve/CVE-2026-68348", "title": "ASoC: tas2781: bound firmware description string parsing", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64002", "url": "https://patchblox.com/security/cve/CVE-2026-64002", "title": "kernel-default: ipv4: free net-\u003Eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74527", "url": "https://patchblox.com/security/cve/CVE-2026-74527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63985", "url": "https://patchblox.com/security/cve/CVE-2026-63985", "title": "kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64097", "url": "https://patchblox.com/security/cve/CVE-2026-64097", "title": "drm/amd/display: Validate GPIO pin LUT table size before iterating", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64133", "url": "https://patchblox.com/security/cve/CVE-2026-64133", "title": "ALSA: asihpi: Fix potential OOB array access at reading cache", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64218", "url": "https://patchblox.com/security/cve/CVE-2026-64218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbon...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68104", "url": "https://patchblox.com/security/cve/CVE-2026-68104", "title": "drm/amdgpu: invoke pm_genpd_remove() before freeing genpd", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68106", "url": "https://patchblox.com/security/cve/CVE-2026-68106", "title": "drm/amdgpu: fix division by zero with invalid uvd dimensions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68245", "url": "https://patchblox.com/security/cve/CVE-2026-68245", "title": "drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68297", "url": "https://patchblox.com/security/cve/CVE-2026-68297", "title": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64109", "url": "https://patchblox.com/security/cve/CVE-2026-64109", "title": "kernel-default: af_unix: Peek the queue synchronized (bsc#1273748).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72497", "url": "https://patchblox.com/security/cve/CVE-2026-72497", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The v...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72499", "url": "https://patchblox.com/security/cve/CVE-2026-72499", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64051", "url": "https://patchblox.com/security/cve/CVE-2026-64051", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\naccel/qaic: Add overflow check to remap_pfn_range...", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53094", "url": "https://patchblox.com/security/cve/CVE-2026-53094", "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63995", "url": "https://patchblox.com/security/cve/CVE-2026-63995", "title": "kernel-64kb: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63996", "url": "https://patchblox.com/security/cve/CVE-2026-63996", "title": "kernel-64kb: ethtool: cmis: require exact CDB reply length (bsc#1273032).", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64001", "url": "https://patchblox.com/security/cve/CVE-2026-64001", "title": "ALSA: pcm: oss: Fix setup list UAF on proc write error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64134", "url": "https://patchblox.com/security/cve/CVE-2026-64134", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64137", "url": "https://patchblox.com/security/cve/CVE-2026-64137", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64217", "url": "https://patchblox.com/security/cve/CVE-2026-64217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64225", "url": "https://patchblox.com/security/cve/CVE-2026-64225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64348", "url": "https://patchblox.com/security/cve/CVE-2026-64348", "title": "usb: free iso schedules on failed submit", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64365", "url": "https://patchblox.com/security/cve/CVE-2026-64365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driv...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64381", "url": "https://patchblox.com/security/cve/CVE-2026-64381", "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68392", "url": "https://patchblox.com/security/cve/CVE-2026-68392", "title": "Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68419", "url": "https://patchblox.com/security/cve/CVE-2026-68419", "title": "RDMA/irdma: Prevent rereg_mr for non-mem regions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74334", "url": "https://patchblox.com/security/cve/CVE-2026-74334", "title": "RDMA/nldev: Fix locking when accessing mr-\u003Epd", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74454", "url": "https://patchblox.com/security/cve/CVE-2026-74454", "title": "drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74610", "url": "https://patchblox.com/security/cve/CVE-2026-74610", "title": "tls: don\u0027t leave a full plaintext sk_msg ring unpushed", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23454", "url": "https://patchblox.com/security/cve/CVE-2026-23454", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64224", "url": "https://patchblox.com/security/cve/CVE-2026-64224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68320", "url": "https://patchblox.com/security/cve/CVE-2026-68320", "title": "sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46070", "url": "https://patchblox.com/security/cve/CVE-2026-46070", "title": "md/raid5: validate payload size before accessing journal metadata", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64146", "url": "https://patchblox.com/security/cve/CVE-2026-64146", "title": "erofs: fix metabuf leak in inode xattr initialization", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64436", "url": "https://patchblox.com/security/cve/CVE-2026-64436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53034", "url": "https://patchblox.com/security/cve/CVE-2026-53034", "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63865", "url": "https://patchblox.com/security/cve/CVE-2026-63865", "title": "kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68329", "url": "https://patchblox.com/security/cve/CVE-2026-68329", "title": "iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64266", "url": "https://patchblox.com/security/cve/CVE-2026-64266", "title": "fuse: re-lock request before returning from fuse_ref_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64539", "url": "https://patchblox.com/security/cve/CVE-2026-64539", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepend...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68445", "url": "https://patchblox.com/security/cve/CVE-2026-68445", "title": "drm/vc4: Prevent shader BO mappings from becoming writable", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74496", "url": "https://patchblox.com/security/cve/CVE-2026-74496", "title": "fou: Fix use-after-free in fou_create()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74518", "url": "https://patchblox.com/security/cve/CVE-2026-74518", "title": "mm/hugetlb: fix list corruption in allocate_file_region_entries()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43015", "url": "https://patchblox.com/security/cve/CVE-2026-43015", "title": "kernel-64kb: CVE-2026-43014, net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64011", "url": "https://patchblox.com/security/cve/CVE-2026-64011", "title": "kernel-default: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64305", "url": "https://patchblox.com/security/cve/CVE-2026-64305", "title": "crypto: qat - protect service table iterations with service_lock", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64329", "url": "https://patchblox.com/security/cve/CVE-2026-64329", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: Fix use-after-free of ucs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64340", "url": "https://patchblox.com/security/cve/CVE-2026-64340", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconn...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64341", "url": "https://patchblox.com/security/cve/CVE-2026-64341", "title": "USB: iowarrior: fix use-after-free on disconnect race", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64342", "url": "https://patchblox.com/security/cve/CVE-2026-64342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64343", "url": "https://patchblox.com/security/cve/CVE-2026-64343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect rac...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64344", "url": "https://patchblox.com/security/cve/CVE-2026-64344", "title": "linux-6.12: In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64362", "url": "https://patchblox.com/security/cve/CVE-2026-64362", "title": "HID: lg-g15: cancel pending work on remove to fix a use-after-free", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64401", "url": "https://patchblox.com/security/cve/CVE-2026-64401", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registra...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64543", "url": "https://patchblox.com/security/cve/CVE-2026-64543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68427", "url": "https://patchblox.com/security/cve/CVE-2026-68427", "title": "gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74482", "url": "https://patchblox.com/security/cve/CVE-2026-74482", "title": "mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74512", "url": "https://patchblox.com/security/cve/CVE-2026-74512", "title": "audit: fix potential use-after-free in audit_del_rule()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74548", "url": "https://patchblox.com/security/cve/CVE-2026-74548", "title": "forcedeth: fix UAF of txrx_stats in nv_remove", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43386", "url": "https://patchblox.com/security/cve/CVE-2026-43386", "title": "kernel-64kb: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64014", "url": "https://patchblox.com/security/cve/CVE-2026-64014", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64121", "url": "https://patchblox.com/security/cve/CVE-2026-64121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31418", "url": "https://patchblox.com/security/cve/CVE-2026-31418", "title": "netfilter: ipset: drop logically empty buckets in mtype_del", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64421", "url": "https://patchblox.com/security/cve/CVE-2026-64421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix use-after-free on remo...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64433", "url": "https://patchblox.com/security/cve/CVE-2026-64433", "title": "Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64567", "url": "https://patchblox.com/security/cve/CVE-2026-64567", "title": "btrfs: reject free space cache with more entries than pages", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68263", "url": "https://patchblox.com/security/cve/CVE-2026-68263", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_en...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68394", "url": "https://patchblox.com/security/cve/CVE-2026-68394", "title": "kernel-uek64k-modules-core: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update (Cen Zhang)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64407", "url": "https://patchblox.com/security/cve/CVE-2026-64407", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix out-of-bounds firmware...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68189", "url": "https://patchblox.com/security/cve/CVE-2026-68189", "title": "Bluetooth: hci_sync: Protect UUID list traversal", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64427", "url": "https://patchblox.com/security/cve/CVE-2026-64427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short...", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46091", "url": "https://patchblox.com/security/cve/CVE-2026-46091", "title": "media: rc: igorplugusb: heed coherency rules", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64316", "url": "https://patchblox.com/security/cve/CVE-2026-64316", "title": "crypto: caam - use print_hex_dump_devel to guard key hex dumps", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64496", "url": "https://patchblox.com/security/cve/CVE-2026-64496", "title": "iio: event: Fix event FIFO reset race", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64222", "url": "https://patchblox.com/security/cve/CVE-2026-64222", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-\u003Estack o...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68116", "url": "https://patchblox.com/security/cve/CVE-2026-68116", "title": "vxlan: mdb: Fix source list corruption on a failed replace", "priority": "High", "severity": "Moderate", "cvss": 7.9, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64581", "url": "https://patchblox.com/security/cve/CVE-2026-64581", "title": "xfrm: fix sk_dst_cache double-free in xfrm_user_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68446", "url": "https://patchblox.com/security/cve/CVE-2026-68446", "title": "drm/vmwgfx: Validate vmw_surface_metadata::array_size", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64576", "url": "https://patchblox.com/security/cve/CVE-2026-64576", "title": "nexthop: initialize extack in nh_res_bucket_migrate()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74582", "url": "https://patchblox.com/security/cve/CVE-2026-74582", "title": "packet: use consistent hard_header_len in non-ring send paths", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53110", "url": "https://patchblox.com/security/cve/CVE-2026-53110", "title": "s390/bpf: Zero-extend bpf prog return values and kfunc arguments", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64558", "url": "https://patchblox.com/security/cve/CVE-2026-64558", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in pkey_pckmo handler im...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64559", "url": "https://patchblox.com/security/cve/CVE-2026-64559", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEY_VERIFYPROTK ioct...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64568", "url": "https://patchblox.com/security/cve/CVE-2026-64568", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp doubl...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64585", "url": "https://patchblox.com/security/cve/CVE-2026-64585", "title": "can: esd_usb: kill anchored URBs before freeing netdevs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31658", "url": "https://patchblox.com/security/cve/CVE-2026-31658", "title": "net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64245", "url": "https://patchblox.com/security/cve/CVE-2026-64245", "title": "fbdev: modedb: fix a possible UAF in fb_find_mode()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64420", "url": "https://patchblox.com/security/cve/CVE-2026-64420", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until prob...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64192", "url": "https://patchblox.com/security/cve/CVE-2026-64192", "title": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53089", "url": "https://patchblox.com/security/cve/CVE-2026-53089", "title": "bpf: Fix use-after-free in offloaded map/prog info fill", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64188", "url": "https://patchblox.com/security/cve/CVE-2026-64188", "title": "net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64246", "url": "https://patchblox.com/security/cve/CVE-2026-64246", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-afte...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64249", "url": "https://patchblox.com/security/cve/CVE-2026-64249", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fpga: region: fix use-after-free in child_region...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64583", "url": "https://patchblox.com/security/cve/CVE-2026-64583", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and drain func_w...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64584", "url": "https://patchblox.com/security/cve/CVE-2026-64584", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work befo...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64599", "url": "https://patchblox.com/security/cve/CVE-2026-64599", "title": "crypto: amlogic - avoid double cleanup in meson_crypto_probe()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74563", "url": "https://patchblox.com/security/cve/CVE-2026-74563", "title": "rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53076", "url": "https://patchblox.com/security/cve/CVE-2026-53076", "title": "kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695).", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64237", "url": "https://patchblox.com/security/cve/CVE-2026-64237", "title": "Input: elan_i2c - validate firmware size before use", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74567", "url": "https://patchblox.com/security/cve/CVE-2026-74567", "title": "keys: fix out-of-bounds read in keyring_get_key_chunk()", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64034", "url": "https://patchblox.com/security/cve/CVE-2026-64034", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 9.3, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64098", "url": "https://patchblox.com/security/cve/CVE-2026-64098", "title": "kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52975", "url": "https://patchblox.com/security/cve/CVE-2026-52975", "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64375", "url": "https://patchblox.com/security/cve/CVE-2026-64375", "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46107", "url": "https://patchblox.com/security/cve/CVE-2026-46107", "title": "dm-thin: fix metadata refcount underflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53096", "url": "https://patchblox.com/security/cve/CVE-2026-53096", "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43116", "url": "https://patchblox.com/security/cve/CVE-2026-43116", "title": "netfilter: ctnetlink: ensure safe access to master conntrack", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64378", "url": "https://patchblox.com/security/cve/CVE-2026-64378", "title": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68107", "url": "https://patchblox.com/security/cve/CVE-2026-68107", "title": "drm/amdgpu/vcn4: avoid rereading IB param length", "priority": "High", "severity": "Low", "cvss": 8.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64004", "url": "https://patchblox.com/security/cve/CVE-2026-64004", "title": "kernel-64kb: net/iucv: fix locking in .getsockopt (bsc#1273804).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64005", "url": "https://patchblox.com/security/cve/CVE-2026-64005", "title": "kernel-64kb: net/smc: Do not re-initialize smc hashtables (bsc#1273831).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64112", "url": "https://patchblox.com/security/cve/CVE-2026-64112", "title": "rbd: eliminate a race in lock_dwork draining on unmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23210", "url": "https://patchblox.com/security/cve/CVE-2026-23210", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64029", "url": "https://patchblox.com/security/cve/CVE-2026-64029", "title": "kernel-default: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766).", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52935", "url": "https://patchblox.com/security/cve/CVE-2026-52935", "title": "xfrm: espintcp: do not reuse an in-progress partial send", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68417", "url": "https://patchblox.com/security/cve/CVE-2026-68417", "title": "RDMA/siw: publish QP after initialization", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43163", "url": "https://patchblox.com/security/cve/CVE-2026-43163", "title": "kernel-64kb: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64257", "url": "https://patchblox.com/security/cve/CVE-2026-64257", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.3, "epss": 0.00664, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-57841", "url": "https://patchblox.com/security/cve/CVE-2024-57841", "title": "kernel-default: CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72341", "url": "https://patchblox.com/security/cve/CVE-2026-72341", "title": "net/mlx5e: Fix publication race for priv-\u003Echannel_stats[]", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68215", "url": "https://patchblox.com/security/cve/CVE-2026-68215", "title": "media: radio-si476x: Unregister v4l2_device on probe failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68217", "url": "https://patchblox.com/security/cve/CVE-2026-68217", "title": "media: pwc: Drain fill_buf on start_streaming() failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68223", "url": "https://patchblox.com/security/cve/CVE-2026-68223", "title": "media: meson: vdec: Fix memory leak in error path of vdec_open", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68226", "url": "https://patchblox.com/security/cve/CVE-2026-68226", "title": "media: cx23885: add ioremap return check and cleanup", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68227", "url": "https://patchblox.com/security/cve/CVE-2026-68227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68231", "url": "https://patchblox.com/security/cve/CVE-2026-68231", "title": "media: airspy: Return queued buffers on start_streaming() failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68277", "url": "https://patchblox.com/security/cve/CVE-2026-68277", "title": "drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68405", "url": "https://patchblox.com/security/cve/CVE-2026-68405", "title": "wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72307", "url": "https://patchblox.com/security/cve/CVE-2026-72307", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72308", "url": "https://patchblox.com/security/cve/CVE-2026-72308", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74395", "url": "https://patchblox.com/security/cve/CVE-2026-74395", "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68184", "url": "https://patchblox.com/security/cve/CVE-2026-68184", "title": "cdrom: fix stack out-of-bounds read in CDROMVOLCTRL", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68197", "url": "https://patchblox.com/security/cve/CVE-2026-68197", "title": "wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68250", "url": "https://patchblox.com/security/cve/CVE-2026-68250", "title": "drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68304", "url": "https://patchblox.com/security/cve/CVE-2026-68304", "title": "wifi: brcmfmac: fix 802.1X-SHA256 call trace warning", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68313", "url": "https://patchblox.com/security/cve/CVE-2026-68313", "title": "tipc: fix infinite loop in __tipc_nl_compat_dumpit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68322", "url": "https://patchblox.com/security/cve/CVE-2026-68322", "title": "rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68410", "url": "https://patchblox.com/security/cve/CVE-2026-68410", "title": "wifi: libertas: fix memory leak in helper_firmware_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68205", "url": "https://patchblox.com/security/cve/CVE-2026-68205", "title": "media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68251", "url": "https://patchblox.com/security/cve/CVE-2026-68251", "title": "drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68422", "url": "https://patchblox.com/security/cve/CVE-2026-68422", "title": "btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72467", "url": "https://patchblox.com/security/cve/CVE-2026-72467", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68303", "url": "https://patchblox.com/security/cve/CVE-2026-68303", "title": "drm/vc4: hvs/v3d: Fix null dereference in unbind", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63969", "url": "https://patchblox.com/security/cve/CVE-2026-63969", "title": "kernel-64kb: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68194", "url": "https://patchblox.com/security/cve/CVE-2026-68194", "title": "wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68195", "url": "https://patchblox.com/security/cve/CVE-2026-68195", "title": "wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68386", "url": "https://patchblox.com/security/cve/CVE-2026-68386", "title": "bpf, sockmap: Reject unhashed UDP sockets on sockmap update", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68369", "url": "https://patchblox.com/security/cve/CVE-2026-68369", "title": "usb: gadget: printer: fix infinite loop in printer_read()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68339", "url": "https://patchblox.com/security/cve/CVE-2026-68339", "title": "Bluetooth: btusb: validate Realtek vendor event length", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68346", "url": "https://patchblox.com/security/cve/CVE-2026-68346", "title": "kernel-uek64k-modules-core: ALSA: hda: cs35l41: validate and free ACPI mute object (Guangshuo Li)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72132", "url": "https://patchblox.com/security/cve/CVE-2026-72132", "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68220", "url": "https://patchblox.com/security/cve/CVE-2026-68220", "title": "media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64517", "url": "https://patchblox.com/security/cve/CVE-2026-64517", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in err...", "priority": "Routine", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68261", "url": "https://patchblox.com/security/cve/CVE-2026-68261", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvr_vm_co...", "priority": "Routine", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68269", "url": "https://patchblox.com/security/cve/CVE-2026-68269", "title": "drm/i915/gem: Add missing nospec on parallel submit slot", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72032", "url": "https://patchblox.com/security/cve/CVE-2026-72032", "title": "kernel-uek64k-modules-core: net/mlx5: HWS, fix matcher leak on resize target setup failure (Dawei Feng)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68312", "url": "https://patchblox.com/security/cve/CVE-2026-68312", "title": "cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72498", "url": "https://patchblox.com/security/cve/CVE-2026-72498", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid displaying the kernel pointe...", "priority": "Routine", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90082", "url": "https://patchblox.com/security/cve/CVE-2026-90082", "title": "net: mana: Cap MSI-X vectors to the device MSI-X table size", "priority": "Routine", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-11T01:43:54Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }