# SUSE-SU-2026:4660-1: Security update for 7 packages

SUSE-SU-2026:4660-1, released November 7, 2026, fixes 124 CVEs across 7 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-4660-1
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 124, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:4660-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.138.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.138.1.150600.12.64.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.138.1 |
| [kernel-livepatch-SLE15-SP6_Update_32](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-32.md) | sles 15.6 | 1-150600.13.3.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.138.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.138.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.138.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-72399](https://patchblox.com/security/data/cve/CVE-2026-72399.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net: enetc: check the number of BDs needed for x... | 9.8 | 0.0068 |  |
| [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 |  |
| [CVE-2026-89542](https://patchblox.com/security/data/cve/CVE-2026-89542.md) | Urgent | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 |  |
| [CVE-2026-89551](https://patchblox.com/security/data/cve/CVE-2026-89551.md) | Urgent | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 |  |
| [CVE-2026-89479](https://patchblox.com/security/data/cve/CVE-2026-89479.md) | Urgent | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 |  |
| [CVE-2026-89631](https://patchblox.com/security/data/cve/CVE-2026-89631.md) | Urgent | smb: client: reject a tree connect response whose byte count is too small | 9.1 | 0.0049 |  |
| [CVE-2026-100075](https://patchblox.com/security/data/cve/CVE-2026-100075.md) | Urgent | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | 9.8 | 0.0043 |  |
| [CVE-2026-74469](https://patchblox.com/security/data/cve/CVE-2026-74469.md) | High | sctp: prevent peer transport count overflow | 8.8 | 0.0147 |  |
| [CVE-2026-90413](https://patchblox.com/security/data/cve/CVE-2026-90413.md) | High | IB/isert: reject login PDUs declaring more data than was received | 9.1 | 0.0084 |  |
| [CVE-2026-89968](https://patchblox.com/security/data/cve/CVE-2026-89968.md) | High | nvmet-tcp: reject unsolicited H2CData PDUs | 9.8 | 0.0082 |  |
| [CVE-2026-72398](https://patchblox.com/security/data/cve/CVE-2026-72398.md) | High | sctp: add INIT verification after cookie unpacking | 9.8 | 0.0080 |  |
| [CVE-2026-64320](https://patchblox.com/security/data/cve/CVE-2026-64320.md) | High | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | 9.1 | 0.0080 |  |
| [CVE-2026-72098](https://patchblox.com/security/data/cve/CVE-2026-72098.md) | High | dm-verity: fix buffer overflow in FEC calculation | 9.8 | 0.0079 |  |
| [CVE-2026-72351](https://patchblox.com/security/data/cve/CVE-2026-72351.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-90104](https://patchblox.com/security/data/cve/CVE-2026-90104.md) | High | NFSv4.1: zero referring call lists before decoding | 9.8 | 0.0073 |  |
| [CVE-2026-72322](https://patchblox.com/security/data/cve/CVE-2026-72322.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 |  |
| [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | High | bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781] | 9.8 | 0.0072 |  |
| [CVE-2026-89544](https://patchblox.com/security/data/cve/CVE-2026-89544.md) | High | SUNRPC: fix gssx_dec_option_array error path bugs | 9.8 | 0.0072 |  |
| [CVE-2026-72129](https://patchblox.com/security/data/cve/CVE-2026-72129.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-74267](https://patchblox.com/security/data/cve/CVE-2026-74267.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-80976](https://patchblox.com/security/data/cve/CVE-2026-80976.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-89482](https://patchblox.com/security/data/cve/CVE-2026-89482.md) | High | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone | 9.8 | 0.0071 |  |
| [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0066 |  |
| [CVE-2026-72348](https://patchblox.com/security/data/cve/CVE-2026-72348.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0063 |  |
| [CVE-2026-63795](https://patchblox.com/security/data/cve/CVE-2026-63795.md) | High | 9p: avoid putting oldfid in p9_client_walk() error path | 10.0 | 0.0062 |  |
| [CVE-2026-68376](https://patchblox.com/security/data/cve/CVE-2026-68376.md) | High | sctp: fix auth_hmacs array size in struct sctp_cookie | 8.1 | 0.0061 |  |
| [CVE-2026-74480](https://patchblox.com/security/data/cve/CVE-2026-74480.md) | High | net: bridge: stop fast-leave after deleting a port group | 9.8 | 0.0058 |  |
| [CVE-2026-74737](https://patchblox.com/security/data/cve/CVE-2026-74737.md) | High | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | 9.8 | 0.0055 |  |
| [CVE-2026-74597](https://patchblox.com/security/data/cve/CVE-2026-74597.md) | High | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | 9.8 | 0.0054 |  |
| [CVE-2026-74743](https://patchblox.com/security/data/cve/CVE-2026-74743.md) | High | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | 9.8 | 0.0054 |  |
| [CVE-2026-74473](https://patchblox.com/security/data/cve/CVE-2026-74473.md) | High | vxlan: use pskb_network_may_pull() in route_shortcircuit() | 9.8 | 0.0053 |  |
| [CVE-2026-74752](https://patchblox.com/security/data/cve/CVE-2026-74752.md) | High | sctp: validate cookie AUTH state before use | 9.8 | 0.0052 |  |
| [CVE-2026-74398](https://patchblox.com/security/data/cve/CVE-2026-74398.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-89674](https://patchblox.com/security/data/cve/CVE-2026-89674.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-90414](https://patchblox.com/security/data/cve/CVE-2026-90414.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-74616](https://patchblox.com/security/data/cve/CVE-2026-74616.md) | High | xdp: reject clones that overrun skb_shared_info tailroom | 9.8 | 0.0051 |  |
| [CVE-2026-74744](https://patchblox.com/security/data/cve/CVE-2026-74744.md) | High | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | 9.8 | 0.0051 |  |
| [CVE-2026-89533](https://patchblox.com/security/data/cve/CVE-2026-89533.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 |  |
| [CVE-2026-89702](https://patchblox.com/security/data/cve/CVE-2026-89702.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 |  |
| [CVE-2026-89532](https://patchblox.com/security/data/cve/CVE-2026-89532.md) | High | svcrdma: Fix pcl_for_each_segment for empty chunks | 9.1 | 0.0050 |  |
| [CVE-2026-74493](https://patchblox.com/security/data/cve/CVE-2026-74493.md) | High | net/smc: fix socket use-after-free during link group termination | 9.8 | 0.0050 |  |
| [CVE-2026-74586](https://patchblox.com/security/data/cve/CVE-2026-74586.md) | High | sctp: clear new_transport when removing a peer | 9.8 | 0.0050 |  |
| [CVE-2026-74588](https://patchblox.com/security/data/cve/CVE-2026-74588.md) | High | sctp: keep chunk->transport in step with the list it is queued on | 9.8 | 0.0050 |  |
| [CVE-2026-74688](https://patchblox.com/security/data/cve/CVE-2026-74688.md) | High | sctp: clear control chunk transport if it is being removed | 9.8 | 0.0050 |  |
| [CVE-2026-74476](https://patchblox.com/security/data/cve/CVE-2026-74476.md) | High | veth: convert frag_list skbs before running XDP | 9.1 | 0.0049 |  |
| [CVE-2026-80714](https://patchblox.com/security/data/cve/CVE-2026-80714.md) | High | ipvs: do not propagate one-packet flag to synced conns | 9.8 | 0.0048 |  |
| [CVE-2026-74608](https://patchblox.com/security/data/cve/CVE-2026-74608.md) | High | smb: client: Fix use-after-free in cifs_try_adding_channels() | 9.8 | 0.0048 |  |
| [CVE-2026-80725](https://patchblox.com/security/data/cve/CVE-2026-80725.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0046 |  |
| [CVE-2026-80844](https://patchblox.com/security/data/cve/CVE-2026-80844.md) | High | xfrm: ah6: validate routing header segments_left | 8.3 | 0.0043 |  |
| [CVE-2026-46135](https://patchblox.com/security/data/cve/CVE-2026-46135.md) | High | nvmet-tcp: fix race between ICReq handling and queue teardown | 9.8 | 0.0040 |  |
| [CVE-2026-81000](https://patchblox.com/security/data/cve/CVE-2026-81000.md) | High | bpftool: net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40035523] | 8.3 | 0.0036 |  |
| [CVE-2026-72157](https://patchblox.com/security/data/cve/CVE-2026-72157.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0035 |  |
| [CVE-2026-89569](https://patchblox.com/security/data/cve/CVE-2026-89569.md) | High | Bluetooth: RFCOMM: serialize security confirmation handling | 8.8 | 0.0034 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-74540](https://patchblox.com/security/data/cve/CVE-2026-74540.md) | High | Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp | 8.8 | 0.0026 |  |
| [CVE-2026-74541](https://patchblox.com/security/data/cve/CVE-2026-74541.md) | High | kernel-uek64k-modules-core: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (Pauli Virtanen) | 8.8 | 0.0025 |  |
| [CVE-2026-74356](https://patchblox.com/security/data/cve/CVE-2026-74356.md) | High | vhost: fix vhost_get_avail_idx for a non empty ring | 7.4 | 0.0025 |  |
| [CVE-2026-80799](https://patchblox.com/security/data/cve/CVE-2026-80799.md) | High | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | 8.1 | 0.0023 |  |
| [CVE-2026-80789](https://patchblox.com/security/data/cve/CVE-2026-80789.md) | High | nvmet-tcp: bound SGL data length before allocating command buffers | 7.5 | 0.0023 |  |
| [CVE-2026-90198](https://patchblox.com/security/data/cve/CVE-2026-90198.md) | High | kernel-uek64k-modules-core: ALSA: core: Fix use-after-free in snd_card_do_free() (Aleksandr Nogikh) [Orabug: 40041814] | 7.8 | 0.0023 |  |
| [CVE-2026-90259](https://patchblox.com/security/data/cve/CVE-2026-90259.md) | High | kernel-default: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). | n/a | 0.0021 |  |
| [CVE-2026-80840](https://patchblox.com/security/data/cve/CVE-2026-80840.md) | High | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 7.8 | 0.0021 |  |
| [CVE-2026-68162](https://patchblox.com/security/data/cve/CVE-2026-68162.md) | High | sctp: avoid auth_enable sysctl UAF during netns teardown | 8.8 | 0.0020 |  |
| [CVE-2025-38704](https://patchblox.com/security/data/cve/CVE-2025-38704.md) | High | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 7.8 | 0.0019 |  |
| [CVE-2026-80852](https://patchblox.com/security/data/cve/CVE-2026-80852.md) | High | tls: device: fix out-of-bounds write in tls_append_frag() | 7.8 | 0.0018 |  |
| [CVE-2026-89638](https://patchblox.com/security/data/cve/CVE-2026-89638.md) | High | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions | 8.8 | 0.0018 |  |
| [CVE-2026-72066](https://patchblox.com/security/data/cve/CVE-2026-72066.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-80841](https://patchblox.com/security/data/cve/CVE-2026-80841.md) | High | net/packet: defer vmalloc TX_RING free until skbs finish | 7.8 | 0.0017 |  |
| [CVE-2026-72449](https://patchblox.com/security/data/cve/CVE-2026-72449.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-74283](https://patchblox.com/security/data/cve/CVE-2026-74283.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... | 9.8 | 0.0017 |  |
| [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 |  |
| [CVE-2026-72164](https://patchblox.com/security/data/cve/CVE-2026-72164.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72301](https://patchblox.com/security/data/cve/CVE-2026-72301.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-90309](https://patchblox.com/security/data/cve/CVE-2026-90309.md) | High | RDMA/erdma: Hold CQ references when processing EQ events | 7.8 | 0.0017 |  |
| [CVE-2026-72434](https://patchblox.com/security/data/cve/CVE-2026-72434.md) | High | netfilter: ipset: make sure gc is properly stopped | 7.8 | 0.0017 |  |
| [CVE-2026-80909](https://patchblox.com/security/data/cve/CVE-2026-80909.md) | High | drm/amdgpu: Reject UVD message with invalid number of h265 refs | 7.8 | 0.0017 |  |
| [CVE-2026-90308](https://patchblox.com/security/data/cve/CVE-2026-90308.md) | High | RDMA/erdma: Hold QP references for AE and CM processing | 7.8 | 0.0017 |  |
| [CVE-2026-72383](https://patchblox.com/security/data/cve/CVE-2026-72383.md) | High | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 7.8 | 0.0016 |  |
| [CVE-2026-90003](https://patchblox.com/security/data/cve/CVE-2026-90003.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-89899](https://patchblox.com/security/data/cve/CVE-2026-89899.md) | High | media: cec: disable delayed work before freeing an interrupted transmit | 7.8 | 0.0016 |  |
| [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 |  |
| [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 |  |
| [CVE-2026-72051](https://patchblox.com/security/data/cve/CVE-2026-72051.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-74492](https://patchblox.com/security/data/cve/CVE-2026-74492.md) | High | netfilter: ipset: do not update comments from kernel-side hash adds | 8.4 | 0.0014 |  |
| [CVE-2026-74631](https://patchblox.com/security/data/cve/CVE-2026-74631.md) | High | net: smc: fix splice entry lifetime imbalance in smc_rx_splice | 8.8 | 0.0014 |  |
| [CVE-2026-74589](https://patchblox.com/security/data/cve/CVE-2026-74589.md) | High | bpf, sockmap: Fix sk_redir use-after-free in send verdict | 8.4 | 0.0014 |  |
| [CVE-2026-64422](https://patchblox.com/security/data/cve/CVE-2026-64422.md) | High | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | 7.1 | 0.0014 |  |
| [CVE-2026-53400](https://patchblox.com/security/data/cve/CVE-2026-53400.md) | High | i2c: core: fix adapter registration race | 7.8 | 0.0014 |  |
| [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 |  |
| [CVE-2026-68451](https://patchblox.com/security/data/cve/CVE-2026-68451.md) | High | s390/zcrypt: Validate length for CCA ECC private key requests | 8.8 | 0.0013 |  |
| [CVE-2026-68452](https://patchblox.com/security/data/cve/CVE-2026-68452.md) | High | s390/zcrypt: Validate length for CCA AES cipher key requests | 8.8 | 0.0013 |  |
| [CVE-2026-68454](https://patchblox.com/security/data/cve/CVE-2026-68454.md) | High | KVM: s390: pci: Fix handling of AIF enable without AISB | 8.8 | 0.0013 |  |
| [CVE-2026-74443](https://patchblox.com/security/data/cve/CVE-2026-74443.md) | High | drm/vmwgfx: bound DMA command body size against suffix pointer | 8.8 | 0.0013 |  |
| [CVE-2026-74330](https://patchblox.com/security/data/cve/CVE-2026-74330.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74444](https://patchblox.com/security/data/cve/CVE-2026-74444.md) | High | drm/vmwgfx: validate DRAW_PRIMITIVES header size before division | 7.8 | 0.0013 |  |
| [CVE-2026-74453](https://patchblox.com/security/data/cve/CVE-2026-74453.md) | High | drm/vc4: Zero the tile state data array before each BIN job | 7.8 | 0.0013 |  |
| [CVE-2026-80540](https://patchblox.com/security/data/cve/CVE-2026-80540.md) | High | drm/amdgpu: Fix UVD decode image min size calculation | 7.8 | 0.0013 |  |
| [CVE-2026-80737](https://patchblox.com/security/data/cve/CVE-2026-80737.md) | High | serial: amba-pl011: synchronize DMA teardown | 7.8 | 0.0013 |  |
| [CVE-2026-74630](https://patchblox.com/security/data/cve/CVE-2026-74630.md) | High | ipv6: prevent in6_dev_get() from resurrecting inet6_dev | 7.8 | 0.0013 |  |
| [CVE-2026-68445](https://patchblox.com/security/data/cve/CVE-2026-68445.md) | High | drm/vc4: Prevent shader BO mappings from becoming writable | 7.8 | 0.0013 |  |
| [CVE-2026-74615](https://patchblox.com/security/data/cve/CVE-2026-74615.md) | High | vxlan: do not arm the ageing timer on a device that is down | 8.8 | 0.0013 |  |
| [CVE-2026-74363](https://patchblox.com/security/data/cve/CVE-2026-74363.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74388](https://patchblox.com/security/data/cve/CVE-2026-74388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: seq: oss: Fix UAF at handling events with... | 7.8 | 0.0013 |  |
| [CVE-2026-74479](https://patchblox.com/security/data/cve/CVE-2026-74479.md) | High | net: pktgen: fix proc entry use-after-free | 7.8 | 0.0013 |  |
| [CVE-2026-74609](https://patchblox.com/security/data/cve/CVE-2026-74609.md) | High | tipc: read le->link under the node lock in tipc_node_link_down() | 7.8 | 0.0013 |  |
| [CVE-2026-74700](https://patchblox.com/security/data/cve/CVE-2026-74700.md) | High | net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers | 7.8 | 0.0013 |  |
| [CVE-2026-80663](https://patchblox.com/security/data/cve/CVE-2026-80663.md) | High | cpupower: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). | 7.1 | 0.0013 |  |
| [CVE-2026-64580](https://patchblox.com/security/data/cve/CVE-2026-64580.md) | High | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() | 7.8 | 0.0013 |  |
| [CVE-2026-68290](https://patchblox.com/security/data/cve/CVE-2026-68290.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  rds: tcp: unregister sysctl before tearing down... | 7.8 | 0.0013 |  |
| [CVE-2026-80716](https://patchblox.com/security/data/cve/CVE-2026-80716.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 |  |
| [CVE-2026-93782](https://patchblox.com/security/data/cve/CVE-2026-93782.md) | High | vhost-scsi: flush backend after device ioctls | 7.8 | 0.0012 |  |
| [CVE-2026-80580](https://patchblox.com/security/data/cve/CVE-2026-80580.md) | High | fbdev: bound mode sysfs output to the sysfs buffer | 7.8 | 0.0011 |  |
| [CVE-2026-89603](https://patchblox.com/security/data/cve/CVE-2026-89603.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | n/a |  |
| [CVE-2026-90088](https://patchblox.com/security/data/cve/CVE-2026-90088.md) | Routine | Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop | 6.5 | 0.0022 |  |
| [CVE-2026-89931](https://patchblox.com/security/data/cve/CVE-2026-89931.md) | Routine | KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit | 5.3 | 0.0021 |  |
| [CVE-2026-93104](https://patchblox.com/security/data/cve/CVE-2026-93104.md) | Routine | RDMA/rvt: Return NULL after port allocation failure | 5.5 | 0.0018 |  |
| [CVE-2026-74719](https://patchblox.com/security/data/cve/CVE-2026-74719.md) | Routine | net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() | 3.7 | 0.0018 |  |
| [CVE-2026-80785](https://patchblox.com/security/data/cve/CVE-2026-80785.md) | Routine | fbdev: serialize mode sysfs access with lock_fb_info() | 6.3 | 0.0016 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.