{
  "fix": "SUSE-SU-2026:4660-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4660-1",
  "summary": "SUSE-SU-2026:4660-1, released November 7, 2026, fixes 124 CVEs across 7 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-11-07T00:42:08Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 124,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01467,
  "maxCvss": 10,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:4660-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1.150600.12.64.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_32",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-32",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.138.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72399",
      "url": "https://patchblox.com/security/cve/CVE-2026-72399",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: enetc: check the number of BDs needed for x...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00682,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64319",
      "url": "https://patchblox.com/security/cve/CVE-2026-64319",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-auth: validate reply message payload bound...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89542",
      "url": "https://patchblox.com/security/cve/CVE-2026-89542",
      "title": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89551",
      "url": "https://patchblox.com/security/cve/CVE-2026-89551",
      "title": "SUNRPC: xdr_buf_trim: clamp buf-\u003Elen to avoid underflow",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89479",
      "url": "https://patchblox.com/security/cve/CVE-2026-89479",
      "title": "sctp: stop processing a packet once its association is deleted",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89631",
      "url": "https://patchblox.com/security/cve/CVE-2026-89631",
      "title": "smb: client: reject a tree connect response whose byte count is too small",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.1,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-100075",
      "url": "https://patchblox.com/security/cve/CVE-2026-100075",
      "title": "RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74469",
      "url": "https://patchblox.com/security/cve/CVE-2026-74469",
      "title": "sctp: prevent peer transport count overflow",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90413",
      "url": "https://patchblox.com/security/cve/CVE-2026-90413",
      "title": "IB/isert: reject login PDUs declaring more data than was received",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89968",
      "url": "https://patchblox.com/security/cve/CVE-2026-89968",
      "title": "nvmet-tcp: reject unsolicited H2CData PDUs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72398",
      "url": "https://patchblox.com/security/cve/CVE-2026-72398",
      "title": "sctp: add INIT verification after cookie unpacking",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00803,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64320",
      "url": "https://patchblox.com/security/cve/CVE-2026-64320",
      "title": "nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00803,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72098",
      "url": "https://patchblox.com/security/cve/CVE-2026-72098",
      "title": "dm-verity: fix buffer overflow in FEC calculation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00789,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72351",
      "url": "https://patchblox.com/security/cve/CVE-2026-72351",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00745,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90104",
      "url": "https://patchblox.com/security/cve/CVE-2026-90104",
      "title": "NFSv4.1: zero referring call lists before decoding",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0073,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72322",
      "url": "https://patchblox.com/security/cve/CVE-2026-72322",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00724,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72323",
      "url": "https://patchblox.com/security/cve/CVE-2026-72323",
      "title": "bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00724,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89544",
      "url": "https://patchblox.com/security/cve/CVE-2026-89544",
      "title": "SUNRPC: fix gssx_dec_option_array error path bugs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00724,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72129",
      "url": "https://patchblox.com/security/cve/CVE-2026-72129",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74267",
      "url": "https://patchblox.com/security/cve/CVE-2026-74267",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80976",
      "url": "https://patchblox.com/security/cve/CVE-2026-80976",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89482",
      "url": "https://patchblox.com/security/cve/CVE-2026-89482",
      "title": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89636",
      "url": "https://patchblox.com/security/cve/CVE-2026-89636",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72348",
      "url": "https://patchblox.com/security/cve/CVE-2026-72348",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00626,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63795",
      "url": "https://patchblox.com/security/cve/CVE-2026-63795",
      "title": "9p: avoid putting oldfid in p9_client_walk() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 10,
      "epss": 0.00615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68376",
      "url": "https://patchblox.com/security/cve/CVE-2026-68376",
      "title": "sctp: fix auth_hmacs array size in struct sctp_cookie",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.1,
      "epss": 0.00605,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74480",
      "url": "https://patchblox.com/security/cve/CVE-2026-74480",
      "title": "net: bridge: stop fast-leave after deleting a port group",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74737",
      "url": "https://patchblox.com/security/cve/CVE-2026-74737",
      "title": "net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74597",
      "url": "https://patchblox.com/security/cve/CVE-2026-74597",
      "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74743",
      "url": "https://patchblox.com/security/cve/CVE-2026-74743",
      "title": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00536,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74473",
      "url": "https://patchblox.com/security/cve/CVE-2026-74473",
      "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74752",
      "url": "https://patchblox.com/security/cve/CVE-2026-74752",
      "title": "sctp: validate cookie AUTH state before use",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74398",
      "url": "https://patchblox.com/security/cve/CVE-2026-74398",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74406",
      "url": "https://patchblox.com/security/cve/CVE-2026-74406",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89674",
      "url": "https://patchblox.com/security/cve/CVE-2026-89674",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90414",
      "url": "https://patchblox.com/security/cve/CVE-2026-90414",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74616",
      "url": "https://patchblox.com/security/cve/CVE-2026-74616",
      "title": "xdp: reject clones that overrun skb_shared_info tailroom",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00513,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74744",
      "url": "https://patchblox.com/security/cve/CVE-2026-74744",
      "title": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89533",
      "url": "https://patchblox.com/security/cve/CVE-2026-89533",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89702",
      "url": "https://patchblox.com/security/cve/CVE-2026-89702",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89532",
      "url": "https://patchblox.com/security/cve/CVE-2026-89532",
      "title": "svcrdma: Fix pcl_for_each_segment for empty chunks",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74493",
      "url": "https://patchblox.com/security/cve/CVE-2026-74493",
      "title": "net/smc: fix socket use-after-free during link group termination",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74586",
      "url": "https://patchblox.com/security/cve/CVE-2026-74586",
      "title": "sctp: clear new_transport when removing a peer",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74588",
      "url": "https://patchblox.com/security/cve/CVE-2026-74588",
      "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74688",
      "url": "https://patchblox.com/security/cve/CVE-2026-74688",
      "title": "sctp: clear control chunk transport if it is being removed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74476",
      "url": "https://patchblox.com/security/cve/CVE-2026-74476",
      "title": "veth: convert frag_list skbs before running XDP",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80714",
      "url": "https://patchblox.com/security/cve/CVE-2026-80714",
      "title": "ipvs: do not propagate one-packet flag to synced conns",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74608",
      "url": "https://patchblox.com/security/cve/CVE-2026-74608",
      "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80725",
      "url": "https://patchblox.com/security/cve/CVE-2026-80725",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80844",
      "url": "https://patchblox.com/security/cve/CVE-2026-80844",
      "title": "xfrm: ah6: validate routing header segments_left",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00434,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46135",
      "url": "https://patchblox.com/security/cve/CVE-2026-46135",
      "title": "nvmet-tcp: fix race between ICReq handling and queue teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-81000",
      "url": "https://patchblox.com/security/cve/CVE-2026-81000",
      "title": "bpftool: net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40035523]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.3,
      "epss": 0.00357,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72157",
      "url": "https://patchblox.com/security/cve/CVE-2026-72157",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89569",
      "url": "https://patchblox.com/security/cve/CVE-2026-89569",
      "title": "Bluetooth: RFCOMM: serialize security confirmation handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43502",
      "url": "https://patchblox.com/security/cve/CVE-2026-43502",
      "title": "net/rds: handle zerocopy send cleanup before the message is queued",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74540",
      "url": "https://patchblox.com/security/cve/CVE-2026-74540",
      "title": "Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74541",
      "url": "https://patchblox.com/security/cve/CVE-2026-74541",
      "title": "kernel-uek64k-modules-core: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (Pauli Virtanen)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74356",
      "url": "https://patchblox.com/security/cve/CVE-2026-74356",
      "title": "vhost: fix vhost_get_avail_idx for a non empty ring",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.4,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80799",
      "url": "https://patchblox.com/security/cve/CVE-2026-80799",
      "title": "nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80789",
      "url": "https://patchblox.com/security/cve/CVE-2026-80789",
      "title": "nvmet-tcp: bound SGL data length before allocating command buffers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90198",
      "url": "https://patchblox.com/security/cve/CVE-2026-90198",
      "title": "kernel-uek64k-modules-core: ALSA: core: Fix use-after-free in snd_card_do_free() (Aleksandr Nogikh) [Orabug: 40041814]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90259",
      "url": "https://patchblox.com/security/cve/CVE-2026-90259",
      "title": "kernel-default: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680).",
      "priority": "High",
      "severity": "important",
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80840",
      "url": "https://patchblox.com/security/cve/CVE-2026-80840",
      "title": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68162",
      "url": "https://patchblox.com/security/cve/CVE-2026-68162",
      "title": "sctp: avoid auth_enable sysctl UAF during netns teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38704",
      "url": "https://patchblox.com/security/cve/CVE-2025-38704",
      "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80852",
      "url": "https://patchblox.com/security/cve/CVE-2026-80852",
      "title": "tls: device: fix out-of-bounds write in tls_append_frag()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89638",
      "url": "https://patchblox.com/security/cve/CVE-2026-89638",
      "title": "smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72066",
      "url": "https://patchblox.com/security/cve/CVE-2026-72066",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80841",
      "url": "https://patchblox.com/security/cve/CVE-2026-80841",
      "title": "net/packet: defer vmalloc TX_RING free until skbs finish",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72449",
      "url": "https://patchblox.com/security/cve/CVE-2026-72449",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74283",
      "url": "https://patchblox.com/security/cve/CVE-2026-74283",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 9.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72136",
      "url": "https://patchblox.com/security/cve/CVE-2026-72136",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72164",
      "url": "https://patchblox.com/security/cve/CVE-2026-72164",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72301",
      "url": "https://patchblox.com/security/cve/CVE-2026-72301",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90309",
      "url": "https://patchblox.com/security/cve/CVE-2026-90309",
      "title": "RDMA/erdma: Hold CQ references when processing EQ events",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72434",
      "url": "https://patchblox.com/security/cve/CVE-2026-72434",
      "title": "netfilter: ipset: make sure gc is properly stopped",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80909",
      "url": "https://patchblox.com/security/cve/CVE-2026-80909",
      "title": "drm/amdgpu: Reject UVD message with invalid number of h265 refs",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90308",
      "url": "https://patchblox.com/security/cve/CVE-2026-90308",
      "title": "RDMA/erdma: Hold QP references for AE and CM processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72383",
      "url": "https://patchblox.com/security/cve/CVE-2026-72383",
      "title": "sctp: fix addr_wq_timer race in sctp_free_addr_wq()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90003",
      "url": "https://patchblox.com/security/cve/CVE-2026-90003",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89899",
      "url": "https://patchblox.com/security/cve/CVE-2026-89899",
      "title": "media: cec: disable delayed work before freeing an interrupted transmit",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64556",
      "url": "https://patchblox.com/security/cve/CVE-2026-64556",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/core: Detach event groups during remove_on_...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72061",
      "url": "https://patchblox.com/security/cve/CVE-2026-72061",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72051",
      "url": "https://patchblox.com/security/cve/CVE-2026-72051",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72052",
      "url": "https://patchblox.com/security/cve/CVE-2026-72052",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72053",
      "url": "https://patchblox.com/security/cve/CVE-2026-72053",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72054",
      "url": "https://patchblox.com/security/cve/CVE-2026-72054",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72055",
      "url": "https://patchblox.com/security/cve/CVE-2026-72055",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74492",
      "url": "https://patchblox.com/security/cve/CVE-2026-74492",
      "title": "netfilter: ipset: do not update comments from kernel-side hash adds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74631",
      "url": "https://patchblox.com/security/cve/CVE-2026-74631",
      "title": "net: smc: fix splice entry lifetime imbalance in smc_rx_splice",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74589",
      "url": "https://patchblox.com/security/cve/CVE-2026-74589",
      "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64422",
      "url": "https://patchblox.com/security/cve/CVE-2026-64422",
      "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53400",
      "url": "https://patchblox.com/security/cve/CVE-2026-53400",
      "title": "i2c: core: fix adapter registration race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64279",
      "url": "https://patchblox.com/security/cve/CVE-2026-64279",
      "title": "i2c: core: fix adapter deregistration race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68451",
      "url": "https://patchblox.com/security/cve/CVE-2026-68451",
      "title": "s390/zcrypt: Validate length for CCA ECC private key requests",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68452",
      "url": "https://patchblox.com/security/cve/CVE-2026-68452",
      "title": "s390/zcrypt: Validate length for CCA AES cipher key requests",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68454",
      "url": "https://patchblox.com/security/cve/CVE-2026-68454",
      "title": "KVM: s390: pci: Fix handling of AIF enable without AISB",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74443",
      "url": "https://patchblox.com/security/cve/CVE-2026-74443",
      "title": "drm/vmwgfx: bound DMA command body size against suffix pointer",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74330",
      "url": "https://patchblox.com/security/cve/CVE-2026-74330",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74444",
      "url": "https://patchblox.com/security/cve/CVE-2026-74444",
      "title": "drm/vmwgfx: validate DRAW_PRIMITIVES header size before division",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74453",
      "url": "https://patchblox.com/security/cve/CVE-2026-74453",
      "title": "drm/vc4: Zero the tile state data array before each BIN job",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80540",
      "url": "https://patchblox.com/security/cve/CVE-2026-80540",
      "title": "drm/amdgpu: Fix UVD decode image min size calculation",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80737",
      "url": "https://patchblox.com/security/cve/CVE-2026-80737",
      "title": "serial: amba-pl011: synchronize DMA teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74630",
      "url": "https://patchblox.com/security/cve/CVE-2026-74630",
      "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68445",
      "url": "https://patchblox.com/security/cve/CVE-2026-68445",
      "title": "drm/vc4: Prevent shader BO mappings from becoming writable",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74615",
      "url": "https://patchblox.com/security/cve/CVE-2026-74615",
      "title": "vxlan: do not arm the ageing timer on a device that is down",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74363",
      "url": "https://patchblox.com/security/cve/CVE-2026-74363",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74388",
      "url": "https://patchblox.com/security/cve/CVE-2026-74388",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: seq: oss: Fix UAF at handling events with...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74479",
      "url": "https://patchblox.com/security/cve/CVE-2026-74479",
      "title": "net: pktgen: fix proc entry use-after-free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74609",
      "url": "https://patchblox.com/security/cve/CVE-2026-74609",
      "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74700",
      "url": "https://patchblox.com/security/cve/CVE-2026-74700",
      "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80663",
      "url": "https://patchblox.com/security/cve/CVE-2026-80663",
      "title": "cpupower: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64580",
      "url": "https://patchblox.com/security/cve/CVE-2026-64580",
      "title": "xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68290",
      "url": "https://patchblox.com/security/cve/CVE-2026-68290",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  rds: tcp: unregister sysctl before tearing down...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80716",
      "url": "https://patchblox.com/security/cve/CVE-2026-80716",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93782",
      "url": "https://patchblox.com/security/cve/CVE-2026-93782",
      "title": "vhost-scsi: flush backend after device ioctls",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80580",
      "url": "https://patchblox.com/security/cve/CVE-2026-80580",
      "title": "fbdev: bound mode sysfs output to the sysfs buffer",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89603",
      "url": "https://patchblox.com/security/cve/CVE-2026-89603",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90088",
      "url": "https://patchblox.com/security/cve/CVE-2026-90088",
      "title": "Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89931",
      "url": "https://patchblox.com/security/cve/CVE-2026-89931",
      "title": "KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93104",
      "url": "https://patchblox.com/security/cve/CVE-2026-93104",
      "title": "RDMA/rvt: Return NULL after port allocation failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74719",
      "url": "https://patchblox.com/security/cve/CVE-2026-74719",
      "title": "net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 3.7,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80785",
      "url": "https://patchblox.com/security/cve/CVE-2026-80785",
      "title": "fbdev: serialize mode sysfs access with lock_fb_info()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}