# SUSE-SU-2026:4706-1: Security update for 10 packages SUSE-SU-2026:4706-1, released November 7, 2026, fixes 508 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-4706-1 - Platform: Linux - Released: Nov 7, 2026 - Priority: Urgent (Closes CVE-2026-89970, rated Critical) - CVEs: 508, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:4706-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.84.1.150700.17.47.1 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-livepatch-SLE15-SP7_Update_22](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-22.md) | sles 15.7 | 1-150700.15.3.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.84.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.84.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-89970](https://patchblox.com/security/data/cve/CVE-2026-89970.md) | Urgent | nvmet-auth: Synchronize timeout work during SQ teardown | 9.8 | 0.0080 | | | [CVE-2026-89697](https://patchblox.com/security/data/cve/CVE-2026-89697.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SET... | 9.1 | 0.0070 | | | [CVE-2026-72399](https://patchblox.com/security/data/cve/CVE-2026-72399.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x... | 9.8 | 0.0068 | | | [CVE-2026-89672](https://patchblox.com/security/data/cve/CVE-2026-89672.md) | Urgent | kernel-64kb: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). | 9.1 | 0.0060 | | | [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 | | | [CVE-2026-53384](https://patchblox.com/security/data/cve/CVE-2026-53384.md) | Urgent | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | 9.8 | 0.0052 | | | [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | | | [CVE-2026-89542](https://patchblox.com/security/data/cve/CVE-2026-89542.md) | Urgent | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 | | | [CVE-2026-89551](https://patchblox.com/security/data/cve/CVE-2026-89551.md) | Urgent | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 | | | [CVE-2026-80681](https://patchblox.com/security/data/cve/CVE-2026-80681.md) | Urgent | vxlan: re-fetch eth header after route_shortcircuit() | 9.8 | 0.0050 | | | [CVE-2026-89479](https://patchblox.com/security/data/cve/CVE-2026-89479.md) | Urgent | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 | | | [CVE-2026-89631](https://patchblox.com/security/data/cve/CVE-2026-89631.md) | Urgent | smb: client: reject a tree connect response whose byte count is too small | 9.1 | 0.0049 | | | [CVE-2026-93207](https://patchblox.com/security/data/cve/CVE-2026-93207.md) | Urgent | SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry | 9.8 | 0.0047 | | | [CVE-2026-100075](https://patchblox.com/security/data/cve/CVE-2026-100075.md) | Urgent | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | 9.8 | 0.0043 | | | [CVE-2026-80721](https://patchblox.com/security/data/cve/CVE-2026-80721.md) | Urgent | Bluetooth: ISO: ensure no dangling hcon references in iso_conn | 9.8 | 0.0038 | | | [CVE-2026-68198](https://patchblox.com/security/data/cve/CVE-2026-68198.md) | Urgent | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | 0.0028 | | | [CVE-2026-68395](https://patchblox.com/security/data/cve/CVE-2026-68395.md) | Urgent | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | 9.8 | 0.0022 | | | [CVE-2026-68146](https://patchblox.com/security/data/cve/CVE-2026-68146.md) | Urgent | ftrace: Add global mutex to serialize trace_parser access | 9.8 | 0.0018 | | | [CVE-2026-80686](https://patchblox.com/security/data/cve/CVE-2026-80686.md) | Urgent | mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE | 9.8 | 0.0017 | | | [CVE-2026-80715](https://patchblox.com/security/data/cve/CVE-2026-80715.md) | Urgent | igc: remove napi_synchronize() in igc_down() | 9.8 | 0.0016 | | | [CVE-2026-80693](https://patchblox.com/security/data/cve/CVE-2026-80693.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to th... | 9.3 | 0.0014 | | | [CVE-2026-74469](https://patchblox.com/security/data/cve/CVE-2026-74469.md) | High | sctp: prevent peer transport count overflow | 8.8 | 0.0147 | | | [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 | | | [CVE-2026-90413](https://patchblox.com/security/data/cve/CVE-2026-90413.md) | High | IB/isert: reject login PDUs declaring more data than was received | 9.1 | 0.0084 | | | [CVE-2026-89968](https://patchblox.com/security/data/cve/CVE-2026-89968.md) | High | nvmet-tcp: reject unsolicited H2CData PDUs | 9.8 | 0.0082 | | | [CVE-2026-72130](https://patchblox.com/security/data/cve/CVE-2026-72130.md) | High | kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] | 9.8 | 0.0080 | | | [CVE-2026-72398](https://patchblox.com/security/data/cve/CVE-2026-72398.md) | High | sctp: add INIT verification after cookie unpacking | 9.8 | 0.0080 | | | [CVE-2026-64320](https://patchblox.com/security/data/cve/CVE-2026-64320.md) | High | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | 9.1 | 0.0080 | | | [CVE-2026-72098](https://patchblox.com/security/data/cve/CVE-2026-72098.md) | High | dm-verity: fix buffer overflow in FEC calculation | 9.8 | 0.0079 | | | [CVE-2026-89696](https://patchblox.com/security/data/cve/CVE-2026-89696.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0075 | | | [CVE-2026-90151](https://patchblox.com/security/data/cve/CVE-2026-90151.md) | High | kernel-uek64k-modules-core: NFSv4: remove callback IDR entry on client allocation failure (Ruoyu Wang) [Orabug: 40041662] | 9.8 | 0.0075 | | | [CVE-2026-72299](https://patchblox.com/security/data/cve/CVE-2026-72299.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-72339](https://patchblox.com/security/data/cve/CVE-2026-72339.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-72351](https://patchblox.com/security/data/cve/CVE-2026-72351.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-89680](https://patchblox.com/security/data/cve/CVE-2026-89680.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0074 | | | [CVE-2026-90104](https://patchblox.com/security/data/cve/CVE-2026-90104.md) | High | NFSv4.1: zero referring call lists before decoding | 9.8 | 0.0073 | | | [CVE-2026-72322](https://patchblox.com/security/data/cve/CVE-2026-72322.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | High | bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781] | 9.8 | 0.0072 | | | [CVE-2026-72491](https://patchblox.com/security/data/cve/CVE-2026-72491.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-89544](https://patchblox.com/security/data/cve/CVE-2026-89544.md) | High | SUNRPC: fix gssx_dec_option_array error path bugs | 9.8 | 0.0072 | | | [CVE-2026-80646](https://patchblox.com/security/data/cve/CVE-2026-80646.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-68477](https://patchblox.com/security/data/cve/CVE-2026-68477.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-72129](https://patchblox.com/security/data/cve/CVE-2026-72129.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-74267](https://patchblox.com/security/data/cve/CVE-2026-74267.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-74268](https://patchblox.com/security/data/cve/CVE-2026-74268.md) | High | tcp: clear sock_ops cb flags before force-closing a child socket | 9.8 | 0.0071 | | | [CVE-2026-80976](https://patchblox.com/security/data/cve/CVE-2026-80976.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-89482](https://patchblox.com/security/data/cve/CVE-2026-89482.md) | High | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone | 9.8 | 0.0071 | | | [CVE-2026-89485](https://patchblox.com/security/data/cve/CVE-2026-89485.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-89538](https://patchblox.com/security/data/cve/CVE-2026-89538.md) | High | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field | 9.8 | 0.0071 | | | [CVE-2026-89712](https://patchblox.com/security/data/cve/CVE-2026-89712.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-72436](https://patchblox.com/security/data/cve/CVE-2026-72436.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-89686](https://patchblox.com/security/data/cve/CVE-2026-89686.md) | High | nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke | 9.8 | 0.0071 | | | [CVE-2026-89511](https://patchblox.com/security/data/cve/CVE-2026-89511.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0071 | | | [CVE-2026-72242](https://patchblox.com/security/data/cve/CVE-2026-72242.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0070 | | | [CVE-2026-72247](https://patchblox.com/security/data/cve/CVE-2026-72247.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 | | | [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 | | | [CVE-2026-89707](https://patchblox.com/security/data/cve/CVE-2026-89707.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 | | | [CVE-2026-90293](https://patchblox.com/security/data/cve/CVE-2026-90293.md) | High | kernel-uek64k-modules-core: IB/isert: post the full-feature receive buffers after session registration (Yehyeong Lee) [Orabug: 40042125] | 7.5 | 0.0070 | | | [CVE-2026-90294](https://patchblox.com/security/data/cve/CVE-2026-90294.md) | High | kernel-uek64k-modules-core: IB/isert: delay the final Login Response until the session is registered (Yehyeong Lee) [Orabug: 40042129] | 7.5 | 0.0070 | | | [CVE-2026-97557](https://patchblox.com/security/data/cve/CVE-2026-97557.md) | High | smb: client: avoid leaking refcount in cifs_queue_oplock_break() | 7.5 | 0.0070 | | | [CVE-2026-89662](https://patchblox.com/security/data/cve/CVE-2026-89662.md) | High | NFSD: Prevent lock owner use-after-free during client teardown | 9.8 | 0.0069 | | | [CVE-2026-74281](https://patchblox.com/security/data/cve/CVE-2026-74281.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0068 | | | [CVE-2026-90228](https://patchblox.com/security/data/cve/CVE-2026-90228.md) | High | kernel-uek64k-modules-core: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (Guixin Liu) [Orabug: 40041939] | 7.5 | 0.0068 | | | [CVE-2026-89713](https://patchblox.com/security/data/cve/CVE-2026-89713.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0067 | | | [CVE-2026-90149](https://patchblox.com/security/data/cve/CVE-2026-90149.md) | High | kernel-64kb: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). | 7.5 | 0.0067 | | | [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0066 | | | [CVE-2026-72107](https://patchblox.com/security/data/cve/CVE-2026-72107.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0065 | | | [CVE-2026-89536](https://patchblox.com/security/data/cve/CVE-2026-89536.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72348](https://patchblox.com/security/data/cve/CVE-2026-72348.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0063 | | | [CVE-2026-72330](https://patchblox.com/security/data/cve/CVE-2026-72330.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0062 | | | [CVE-2026-89665](https://patchblox.com/security/data/cve/CVE-2026-89665.md) | High | kernel-64kb: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). | 8.2 | 0.0062 | | | [CVE-2026-68376](https://patchblox.com/security/data/cve/CVE-2026-68376.md) | High | sctp: fix auth_hmacs array size in struct sctp_cookie | 8.1 | 0.0061 | | | [CVE-2026-80603](https://patchblox.com/security/data/cve/CVE-2026-80603.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0060 | | | [CVE-2026-74480](https://patchblox.com/security/data/cve/CVE-2026-74480.md) | High | net: bridge: stop fast-leave after deleting a port group | 9.8 | 0.0058 | | | [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 10.0 | 0.0057 | | | [CVE-2026-89547](https://patchblox.com/security/data/cve/CVE-2026-89547.md) | High | SUNRPC: Check svc pool percpu counter allocation | 8.1 | 0.0056 | | | [CVE-2026-74737](https://patchblox.com/security/data/cve/CVE-2026-74737.md) | High | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | 9.8 | 0.0055 | | | [CVE-2026-89671](https://patchblox.com/security/data/cve/CVE-2026-89671.md) | High | nfsd: gate nfs3 setacl by argp->mask | 9.1 | 0.0055 | | | [CVE-2026-93107](https://patchblox.com/security/data/cve/CVE-2026-93107.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0054 | | | [CVE-2026-74597](https://patchblox.com/security/data/cve/CVE-2026-74597.md) | High | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | 9.8 | 0.0054 | | | [CVE-2026-74743](https://patchblox.com/security/data/cve/CVE-2026-74743.md) | High | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | 9.8 | 0.0054 | | | [CVE-2026-68096](https://patchblox.com/security/data/cve/CVE-2026-68096.md) | High | audit: fix recursive locking deadlock in audit_dupe_exe() | 7.5 | 0.0053 | | | [CVE-2026-89704](https://patchblox.com/security/data/cve/CVE-2026-89704.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0053 | | | [CVE-2026-74473](https://patchblox.com/security/data/cve/CVE-2026-74473.md) | High | vxlan: use pskb_network_may_pull() in route_shortcircuit() | 9.8 | 0.0053 | | | [CVE-2026-80557](https://patchblox.com/security/data/cve/CVE-2026-80557.md) | High | bpftool: libceph: fix OOB read in decode_watchers() via missing bounds check (Pavitra Jha) [Orabug: 39972906] | 9.8 | 0.0053 | | | [CVE-2026-74752](https://patchblox.com/security/data/cve/CVE-2026-74752.md) | High | sctp: validate cookie AUTH state before use | 9.8 | 0.0052 | | | [CVE-2026-68141](https://patchblox.com/security/data/cve/CVE-2026-68141.md) | High | net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() | 7.5 | 0.0052 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-74384](https://patchblox.com/security/data/cve/CVE-2026-74384.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-74398](https://patchblox.com/security/data/cve/CVE-2026-74398.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-89541](https://patchblox.com/security/data/cve/CVE-2026-89541.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-89674](https://patchblox.com/security/data/cve/CVE-2026-89674.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-90414](https://patchblox.com/security/data/cve/CVE-2026-90414.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-74616](https://patchblox.com/security/data/cve/CVE-2026-74616.md) | High | xdp: reject clones that overrun skb_shared_info tailroom | 9.8 | 0.0051 | | | [CVE-2026-74744](https://patchblox.com/security/data/cve/CVE-2026-74744.md) | High | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | 9.8 | 0.0051 | | | [CVE-2026-74376](https://patchblox.com/security/data/cve/CVE-2026-74376.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-89533](https://patchblox.com/security/data/cve/CVE-2026-89533.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-89702](https://patchblox.com/security/data/cve/CVE-2026-89702.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-89532](https://patchblox.com/security/data/cve/CVE-2026-89532.md) | High | svcrdma: Fix pcl_for_each_segment for empty chunks | 9.1 | 0.0050 | | | [CVE-2026-89684](https://patchblox.com/security/data/cve/CVE-2026-89684.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-97413](https://patchblox.com/security/data/cve/CVE-2026-97413.md) | High | RDMA/rtrs-srv: Fix integer underflow in process_read and process_write | 9.8 | 0.0050 | | | [CVE-2026-74523](https://patchblox.com/security/data/cve/CVE-2026-74523.md) | High | qede: sync udp_tunnel ports outside qede_lock in the recovery path | 7.5 | 0.0050 | | | [CVE-2026-74625](https://patchblox.com/security/data/cve/CVE-2026-74625.md) | High | netfilter: bridge: release template ct on non-IP path | 7.5 | 0.0050 | | | [CVE-2026-89477](https://patchblox.com/security/data/cve/CVE-2026-89477.md) | High | sctp: fix NULL deref on untransmitted RECONF completion | 7.5 | 0.0050 | | | [CVE-2026-89699](https://patchblox.com/security/data/cve/CVE-2026-89699.md) | High | nfsd: validate symlink target length in NFSv4 CREATE | 7.5 | 0.0050 | | | [CVE-2026-74705](https://patchblox.com/security/data/cve/CVE-2026-74705.md) | High | udp: fix potential use-after-free in tunnel segmentation | 10.0 | 0.0050 | | | [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-74493](https://patchblox.com/security/data/cve/CVE-2026-74493.md) | High | net/smc: fix socket use-after-free during link group termination | 9.8 | 0.0050 | | | [CVE-2026-74586](https://patchblox.com/security/data/cve/CVE-2026-74586.md) | High | sctp: clear new_transport when removing a peer | 9.8 | 0.0050 | | | [CVE-2026-74588](https://patchblox.com/security/data/cve/CVE-2026-74588.md) | High | sctp: keep chunk->transport in step with the list it is queued on | 9.8 | 0.0050 | | | [CVE-2026-74688](https://patchblox.com/security/data/cve/CVE-2026-74688.md) | High | sctp: clear control chunk transport if it is being removed | 9.8 | 0.0050 | | | [CVE-2026-72438](https://patchblox.com/security/data/cve/CVE-2026-72438.md) | High | md/raid10: fix writes_pending and barrier reference leaks on discard failures | 7.5 | 0.0050 | | | [CVE-2026-72440](https://patchblox.com/security/data/cve/CVE-2026-72440.md) | High | md/raid1: fix writes_pending and barrier reference leaks on write failures | 7.1 | 0.0050 | | | [CVE-2026-74612](https://patchblox.com/security/data/cve/CVE-2026-74612.md) | High | veth: fix skb length accounting after XDP frag adjustment | 10.0 | 0.0049 | | | [CVE-2026-89550](https://patchblox.com/security/data/cve/CVE-2026-89550.md) | High | SUNRPC: svcauth_gss: enforce krb5 token minimum length | 9.8 | 0.0049 | | | [CVE-2026-74476](https://patchblox.com/security/data/cve/CVE-2026-74476.md) | High | veth: convert frag_list skbs before running XDP | 9.1 | 0.0049 | | | [CVE-2026-74696](https://patchblox.com/security/data/cve/CVE-2026-74696.md) | High | tcp: fix TFO max_qlen accounting across reuseport migration | 7.5 | 0.0049 | | | [CVE-2026-80714](https://patchblox.com/security/data/cve/CVE-2026-80714.md) | High | ipvs: do not propagate one-packet flag to synced conns | 9.8 | 0.0048 | | | [CVE-2026-53284](https://patchblox.com/security/data/cve/CVE-2026-53284.md) | High | btrfs: only release the dirty pages io tree after successful writes | 7.5 | 0.0048 | | | [CVE-2026-80631](https://patchblox.com/security/data/cve/CVE-2026-80631.md) | High | btrfs: lzo: reject compressed segment that overflows the compressed input | 7.5 | 0.0048 | | | [CVE-2026-74608](https://patchblox.com/security/data/cve/CVE-2026-74608.md) | High | smb: client: Fix use-after-free in cifs_try_adding_channels() | 9.8 | 0.0048 | | | [CVE-2026-80725](https://patchblox.com/security/data/cve/CVE-2026-80725.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0046 | | | [CVE-2026-89663](https://patchblox.com/security/data/cve/CVE-2026-89663.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0046 | | | [CVE-2026-74490](https://patchblox.com/security/data/cve/CVE-2026-74490.md) | High | tipc: avoid use-after-free in poll trace queue dumps | 8.8 | 0.0046 | | | [CVE-2026-74475](https://patchblox.com/security/data/cve/CVE-2026-74475.md) | High | vxlan: use neigh_ha_snapshot() in route_shortcircuit() | 10.0 | 0.0045 | | | [CVE-2026-74697](https://patchblox.com/security/data/cve/CVE-2026-74697.md) | High | bnxt_en: Disable EOP for TPA on all chips to prevent data corruption | 8.2 | 0.0045 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | kernel-64kb: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). | 7.5 | 0.0044 | | | [CVE-2026-74385](https://patchblox.com/security/data/cve/CVE-2026-74385.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_q... | 7.5 | 0.0044 | | | [CVE-2026-80844](https://patchblox.com/security/data/cve/CVE-2026-80844.md) | High | xfrm: ah6: validate routing header segments_left | 8.3 | 0.0043 | | | [CVE-2026-89481](https://patchblox.com/security/data/cve/CVE-2026-89481.md) | High | nvme-tcp: fix host memory disclosure on R2T for a read command | 8.8 | 0.0043 | | | [CVE-2026-89480](https://patchblox.com/security/data/cve/CVE-2026-89480.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0043 | | | [CVE-2026-74598](https://patchblox.com/security/data/cve/CVE-2026-74598.md) | High | ipv6: fix Route Information option length validation | 7.5 | 0.0043 | | | [CVE-2026-74580](https://patchblox.com/security/data/cve/CVE-2026-74580.md) | High | vhost: reset the vring metadata cache on vring reconfiguration | 8.8 | 0.0041 | | | [CVE-2026-80586](https://patchblox.com/security/data/cve/CVE-2026-80586.md) | High | mptcp: options: reset DSS fields in case of unexpected size | 9.8 | 0.0040 | | | [CVE-2026-46135](https://patchblox.com/security/data/cve/CVE-2026-46135.md) | High | nvmet-tcp: fix race between ICReq handling and queue teardown | 9.8 | 0.0040 | | | [CVE-2026-74665](https://patchblox.com/security/data/cve/CVE-2026-74665.md) | High | kernel-uek64k-modules-core: net: fix skb length accounting after generic XDP frag adjustment (Sun Jian) | 9.1 | 0.0037 | | | [CVE-2026-80589](https://patchblox.com/security/data/cve/CVE-2026-80589.md) | High | block: stop the timeout timer when releasing a never added disk | 9.8 | 0.0037 | | | [CVE-2026-64210](https://patchblox.com/security/data/cve/CVE-2026-64210.md) | High | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | 7.5 | 0.0037 | | | [CVE-2026-81000](https://patchblox.com/security/data/cve/CVE-2026-81000.md) | High | bpftool: net: tun: bound receive headroom (Asim Viladi Oglu Manizada) [Orabug: 40035523] | 8.3 | 0.0036 | | | [CVE-2026-72157](https://patchblox.com/security/data/cve/CVE-2026-72157.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0035 | | | [CVE-2026-46304](https://patchblox.com/security/data/cve/CVE-2026-46304.md) | High | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | 7.5 | 0.0035 | | | [CVE-2026-68471](https://patchblox.com/security/data/cve/CVE-2026-68471.md) | High | wifi: ieee80211: validate MLE common info length | 8.8 | 0.0035 | | | [CVE-2026-89569](https://patchblox.com/security/data/cve/CVE-2026-89569.md) | High | Bluetooth: RFCOMM: serialize security confirmation handling | 8.8 | 0.0034 | | | [CVE-2026-74592](https://patchblox.com/security/data/cve/CVE-2026-74592.md) | High | ima: Instantiate file_truncate and path_truncate hooks | 8.1 | 0.0034 | | | [CVE-2026-90255](https://patchblox.com/security/data/cve/CVE-2026-90255.md) | High | Bluetooth: hci_conn: fix the SCO setup context lifetime | 8.8 | 0.0034 | | | [CVE-2026-74557](https://patchblox.com/security/data/cve/CVE-2026-74557.md) | High | scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer | 7.5 | 0.0033 | | | [CVE-2026-80585](https://patchblox.com/security/data/cve/CVE-2026-80585.md) | High | mptcp: fastopen: only mark MPTFO subflows with SYN data | 9.4 | 0.0031 | | | [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2026-74540](https://patchblox.com/security/data/cve/CVE-2026-74540.md) | High | Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp | 8.8 | 0.0026 | | | [CVE-2024-26730](https://patchblox.com/security/data/cve/CVE-2024-26730.md) | High | kernel-zfcpdump: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). | 7.0 | 0.0025 | | | [CVE-2026-74541](https://patchblox.com/security/data/cve/CVE-2026-74541.md) | High | kernel-uek64k-modules-core: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (Pauli Virtanen) | 8.8 | 0.0025 | | | [CVE-2026-74356](https://patchblox.com/security/data/cve/CVE-2026-74356.md) | High | vhost: fix vhost_get_avail_idx for a non empty ring | 7.4 | 0.0025 | | | [CVE-2026-74534](https://patchblox.com/security/data/cve/CVE-2026-74534.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso... | 8.8 | 0.0024 | | | [CVE-2026-74535](https://patchblox.com/security/data/cve/CVE-2026-74535.md) | High | kernel-uek64k-modules-core: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (Pauli Virtanen) | 8.8 | 0.0024 | | | [CVE-2026-74538](https://patchblox.com/security/data/cve/CVE-2026-74538.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Acce... | 8.8 | 0.0024 | | | [CVE-2026-80722](https://patchblox.com/security/data/cve/CVE-2026-80722.md) | High | wifi: mac80211: validate individual TWT params before driver setup | 9.8 | 0.0024 | | | [CVE-2026-74533](https://patchblox.com/security/data/cve/CVE-2026-74533.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_un... | 8.8 | 0.0024 | | | [CVE-2026-80799](https://patchblox.com/security/data/cve/CVE-2026-80799.md) | High | nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers | 8.1 | 0.0023 | | | [CVE-2026-80789](https://patchblox.com/security/data/cve/CVE-2026-80789.md) | High | nvmet-tcp: bound SGL data length before allocating command buffers | 7.5 | 0.0023 | | | [CVE-2026-93826](https://patchblox.com/security/data/cve/CVE-2026-93826.md) | High | HID: hidpp: fix potential UAF in hidpp_connect_event() | 7.5 | 0.0023 | | | [CVE-2026-64507](https://patchblox.com/security/data/cve/CVE-2026-64507.md) | High | x86/bugs: Enable IBPB flush on BPF JIT allocation | 7.8 | 0.0023 | | | [CVE-2026-90198](https://patchblox.com/security/data/cve/CVE-2026-90198.md) | High | kernel-uek64k-modules-core: ALSA: core: Fix use-after-free in snd_card_do_free() (Aleksandr Nogikh) [Orabug: 40041814] | 7.8 | 0.0023 | | | [CVE-2026-92500](https://patchblox.com/security/data/cve/CVE-2026-92500.md) | High | kernel-64kb: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). | n/a | 0.0022 | | | [CVE-2026-89694](https://patchblox.com/security/data/cve/CVE-2026-89694.md) | High | nfsd: check client ownership when cancelling a copy-notify stateid | 8.8 | 0.0022 | | | [CVE-2026-93108](https://patchblox.com/security/data/cve/CVE-2026-93108.md) | High | RDMA/ipoib: Drain RCU callbacks during module teardown | 7.8 | 0.0022 | | | [CVE-2026-89984](https://patchblox.com/security/data/cve/CVE-2026-89984.md) | High | perf/x86/intel: Fix kernel address leakages in LBR stack | 7.1 | 0.0022 | | | [CVE-2026-72218](https://patchblox.com/security/data/cve/CVE-2026-72218.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0022 | | | [CVE-2026-72219](https://patchblox.com/security/data/cve/CVE-2026-72219.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0022 | | | [CVE-2026-72306](https://patchblox.com/security/data/cve/CVE-2026-72306.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | n/a | 0.0022 | | | [CVE-2026-90097](https://patchblox.com/security/data/cve/CVE-2026-90097.md) | High | kernel-64kb: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). | n/a | 0.0021 | | | [CVE-2026-90259](https://patchblox.com/security/data/cve/CVE-2026-90259.md) | High | kernel-default: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). | n/a | 0.0021 | | | [CVE-2026-93109](https://patchblox.com/security/data/cve/CVE-2026-93109.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 | | | [CVE-2026-92495](https://patchblox.com/security/data/cve/CVE-2026-92495.md) | High | RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap | 7.8 | 0.0021 | | | [CVE-2026-80667](https://patchblox.com/security/data/cve/CVE-2026-80667.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on... | n/a | 0.0021 | | | [CVE-2026-89451](https://patchblox.com/security/data/cve/CVE-2026-89451.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 | | | [CVE-2026-90263](https://patchblox.com/security/data/cve/CVE-2026-90263.md) | High | btrfs: check if root is readonly when setting posix acl | 7.8 | 0.0021 | | | [CVE-2026-92514](https://patchblox.com/security/data/cve/CVE-2026-92514.md) | High | RDMA/erdma: Fix CEQ tasklet use-after-free on removal | 7.8 | 0.0021 | | | [CVE-2026-97950](https://patchblox.com/security/data/cve/CVE-2026-97950.md) | High | configfs: pin the symlink target's dirent instead of chasing ->ci_dentry | 7.8 | 0.0021 | | | [CVE-2026-80840](https://patchblox.com/security/data/cve/CVE-2026-80840.md) | High | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 7.8 | 0.0021 | | | [CVE-2026-93264](https://patchblox.com/security/data/cve/CVE-2026-93264.md) | High | RDMA/efa: Fix PBL chunk length computation | 7.8 | 0.0020 | | | [CVE-2026-90426](https://patchblox.com/security/data/cve/CVE-2026-90426.md) | High | kernel-64kb: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). | n/a | 0.0020 | | | [CVE-2026-97947](https://patchblox.com/security/data/cve/CVE-2026-97947.md) | High | kernel-64kb: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130). | n/a | 0.0020 | | | [CVE-2026-80864](https://patchblox.com/security/data/cve/CVE-2026-80864.md) | High | RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp | 9.8 | 0.0020 | | | [CVE-2025-38704](https://patchblox.com/security/data/cve/CVE-2025-38704.md) | High | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 7.8 | 0.0019 | | | [CVE-2026-89930](https://patchblox.com/security/data/cve/CVE-2026-89930.md) | High | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | 9.3 | 0.0019 | | | [CVE-2026-89913](https://patchblox.com/security/data/cve/CVE-2026-89913.md) | High | KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables | 8.8 | 0.0019 | | | [CVE-2026-74256](https://patchblox.com/security/data/cve/CVE-2026-74256.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0019 | | | [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.7 | 0.0019 | | | [CVE-2026-72425](https://patchblox.com/security/data/cve/CVE-2026-72425.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0018 | | | [CVE-2026-80852](https://patchblox.com/security/data/cve/CVE-2026-80852.md) | High | tls: device: fix out-of-bounds write in tls_append_frag() | 7.8 | 0.0018 | | | [CVE-2026-80863](https://patchblox.com/security/data/cve/CVE-2026-80863.md) | High | RDMA/rxe: Fix OOB in free_rd_atomic_resources() | 7.8 | 0.0018 | | | [CVE-2026-89912](https://patchblox.com/security/data/cve/CVE-2026-89912.md) | High | kernel-64kb: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). | 7.1 | 0.0018 | | | [CVE-2026-72085](https://patchblox.com/security/data/cve/CVE-2026-72085.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0018 | | | [CVE-2026-89638](https://patchblox.com/security/data/cve/CVE-2026-89638.md) | High | smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions | 8.8 | 0.0018 | | | [CVE-2026-72066](https://patchblox.com/security/data/cve/CVE-2026-72066.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-80842](https://patchblox.com/security/data/cve/CVE-2026-80842.md) | High | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | 7.8 | 0.0018 | | | [CVE-2026-90415](https://patchblox.com/security/data/cve/CVE-2026-90415.md) | High | RDMA/cxgb4: free STAG index when TPT entry write fails | 7.1 | 0.0018 | | | [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-89510](https://patchblox.com/security/data/cve/CVE-2026-89510.md) | High | RDMA/cxgb4: Cancel reg_work before freeing device on remove | 7.8 | 0.0018 | | | [CVE-2026-89609](https://patchblox.com/security/data/cve/CVE-2026-89609.md) | High | kernel-64kb: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). | 7.8 | 0.0018 | | | [CVE-2026-90241](https://patchblox.com/security/data/cve/CVE-2026-90241.md) | High | iommu/vt-d: Tear down scalable-mode context on probe failure | 8.2 | 0.0018 | | | [CVE-2026-72352](https://patchblox.com/security/data/cve/CVE-2026-72352.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hi... | 7.8 | 0.0018 | | | [CVE-2026-64473](https://patchblox.com/security/data/cve/CVE-2026-64473.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing dev... | 7.0 | 0.0018 | | | [CVE-2026-72018](https://patchblox.com/security/data/cve/CVE-2026-72018.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move... | 7.8 | 0.0017 | | | [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0017 | | | [CVE-2026-80841](https://patchblox.com/security/data/cve/CVE-2026-80841.md) | High | net/packet: defer vmalloc TX_RING free until skbs finish | 7.8 | 0.0017 | | | [CVE-2026-90047](https://patchblox.com/security/data/cve/CVE-2026-90047.md) | High | drm/xe: Don't hand out the flat CCS storage as usable VRAM | 7.8 | 0.0017 | | | [CVE-2026-92509](https://patchblox.com/security/data/cve/CVE-2026-92509.md) | High | RDMA/core: Fix potential use after free in counter_release() | 7.8 | 0.0017 | | | [CVE-2026-92512](https://patchblox.com/security/data/cve/CVE-2026-92512.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-80836](https://patchblox.com/security/data/cve/CVE-2026-80836.md) | High | crypto: virtio - bound the akcipher result length | 7.5 | 0.0017 | | | [CVE-2026-89710](https://patchblox.com/security/data/cve/CVE-2026-89710.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0017 | | | [CVE-2026-72019](https://patchblox.com/security/data/cve/CVE-2026-72019.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0017 | | | [CVE-2026-74391](https://patchblox.com/security/data/cve/CVE-2026-74391.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0017 | | | [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | n/a | 0.0017 | | | [CVE-2026-72449](https://patchblox.com/security/data/cve/CVE-2026-72449.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-63883](https://patchblox.com/security/data/cve/CVE-2026-63883.md) | High | kernel-64kb: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). | 7.3 | 0.0017 | | | [CVE-2026-90203](https://patchblox.com/security/data/cve/CVE-2026-90203.md) | High | kernel-uek64k-modules-core: Squashfs: check block offset is not negative (Phillip Lougher) [Orabug: 40041834] | 7.1 | 0.0017 | | | [CVE-2026-74283](https://patchblox.com/security/data/cve/CVE-2026-74283.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... | 9.8 | 0.0017 | | | [CVE-2026-72102](https://patchblox.com/security/data/cve/CVE-2026-72102.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 | | | [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 | | | [CVE-2026-63956](https://patchblox.com/security/data/cve/CVE-2026-63956.md) | High | kernel-64kb: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). | 7.8 | 0.0017 | | | [CVE-2026-72135](https://patchblox.com/security/data/cve/CVE-2026-72135.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72164](https://patchblox.com/security/data/cve/CVE-2026-72164.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72406](https://patchblox.com/security/data/cve/CVE-2026-72406.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72435](https://patchblox.com/security/data/cve/CVE-2026-72435.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72488](https://patchblox.com/security/data/cve/CVE-2026-72488.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_coun... | 7.8 | 0.0017 | | | [CVE-2026-90309](https://patchblox.com/security/data/cve/CVE-2026-90309.md) | High | RDMA/erdma: Hold CQ references when processing EQ events | 7.8 | 0.0017 | | | [CVE-2026-90358](https://patchblox.com/security/data/cve/CVE-2026-90358.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-90388](https://patchblox.com/security/data/cve/CVE-2026-90388.md) | High | iommu/dma: Check atomic pool allocation result directly | 7.8 | 0.0017 | | | [CVE-2026-93037](https://patchblox.com/security/data/cve/CVE-2026-93037.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-97940](https://patchblox.com/security/data/cve/CVE-2026-97940.md) | High | ipv6: fix fib6 walker UAF on seq stop | 7.8 | 0.0017 | | | [CVE-2026-89929](https://patchblox.com/security/data/cve/CVE-2026-89929.md) | High | KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU | 8.8 | 0.0017 | | | [CVE-2026-72434](https://patchblox.com/security/data/cve/CVE-2026-72434.md) | High | netfilter: ipset: make sure gc is properly stopped | 7.8 | 0.0017 | | | [CVE-2026-74258](https://patchblox.com/security/data/cve/CVE-2026-74258.md) | High | bpf: Guard __get_user acesss with access_ok for uprobe_multi data | 7.8 | 0.0017 | | | [CVE-2026-80779](https://patchblox.com/security/data/cve/CVE-2026-80779.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-93212](https://patchblox.com/security/data/cve/CVE-2026-93212.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0017 | | | [CVE-2026-64528](https://patchblox.com/security/data/cve/CVE-2026-64528.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock... | n/a | 0.0017 | | | [CVE-2026-74286](https://patchblox.com/security/data/cve/CVE-2026-74286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd... | n/a | 0.0017 | | | [CVE-2026-90428](https://patchblox.com/security/data/cve/CVE-2026-90428.md) | High | kernel-64kb: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). | n/a | 0.0017 | | | [CVE-2026-72243](https://patchblox.com/security/data/cve/CVE-2026-72243.md) | High | kernel: selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] | 8.8 | 0.0017 | | | [CVE-2026-93154](https://patchblox.com/security/data/cve/CVE-2026-93154.md) | High | kernel-64kb: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). | 7.8 | 0.0017 | | | [CVE-2026-80909](https://patchblox.com/security/data/cve/CVE-2026-80909.md) | High | drm/amdgpu: Reject UVD message with invalid number of h265 refs | 7.8 | 0.0017 | | | [CVE-2026-90308](https://patchblox.com/security/data/cve/CVE-2026-90308.md) | High | RDMA/erdma: Hold QP references for AE and CM processing | 7.8 | 0.0017 | | | [CVE-2026-64299](https://patchblox.com/security/data/cve/CVE-2026-64299.md) | High | tracing: Prevent out-of-bounds read in glob matching | 7.1 | 0.0017 | | | [CVE-2026-80947](https://patchblox.com/security/data/cve/CVE-2026-80947.md) | High | wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop | 9.8 | 0.0016 | | | [CVE-2026-90240](https://patchblox.com/security/data/cve/CVE-2026-90240.md) | High | iommu/vt-d: Flush context cache with correct SID when tearing down aliases | 8.8 | 0.0016 | | | [CVE-2026-72125](https://patchblox.com/security/data/cve/CVE-2026-72125.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-72383](https://patchblox.com/security/data/cve/CVE-2026-72383.md) | High | sctp: fix addr_wq_timer race in sctp_free_addr_wq() | 7.8 | 0.0016 | | | [CVE-2026-72404](https://patchblox.com/security/data/cve/CVE-2026-72404.md) | High | tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() | 7.8 | 0.0016 | | | [CVE-2026-81001](https://patchblox.com/security/data/cve/CVE-2026-81001.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-89789](https://patchblox.com/security/data/cve/CVE-2026-89789.md) | High | gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free | 7.8 | 0.0016 | | | [CVE-2026-90003](https://patchblox.com/security/data/cve/CVE-2026-90003.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-90292](https://patchblox.com/security/data/cve/CVE-2026-90292.md) | High | RDMA/siw: Fix use-after-free in siw_accept() | 7.8 | 0.0016 | | | [CVE-2026-92507](https://patchblox.com/security/data/cve/CVE-2026-92507.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-92508](https://patchblox.com/security/data/cve/CVE-2026-92508.md) | High | RDMA/core: Fix potential use after free in ib_free_cq() | 7.8 | 0.0016 | | | [CVE-2026-72297](https://patchblox.com/security/data/cve/CVE-2026-72297.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0016 | | | [CVE-2026-92525](https://patchblox.com/security/data/cve/CVE-2026-92525.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0016 | | | [CVE-2026-89899](https://patchblox.com/security/data/cve/CVE-2026-89899.md) | High | media: cec: disable delayed work before freeing an interrupted transmit | 7.8 | 0.0016 | | | [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 | | | [CVE-2026-68448](https://patchblox.com/security/data/cve/CVE-2026-68448.md) | High | ovl: check access to copy_file_range source with src mounter creds | 7.8 | 0.0016 | | | [CVE-2026-80865](https://patchblox.com/security/data/cve/CVE-2026-80865.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym... | n/a | 0.0016 | | | [CVE-2026-80880](https://patchblox.com/security/data/cve/CVE-2026-80880.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr... | n/a | 0.0016 | | | [CVE-2026-63963](https://patchblox.com/security/data/cve/CVE-2026-63963.md) | High | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | 7.1 | 0.0016 | | | [CVE-2026-90243](https://patchblox.com/security/data/cve/CVE-2026-90243.md) | High | iommu/vt-d: Clear Present bit before tearing down copied context entry | 8.1 | 0.0016 | | | [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-97505](https://patchblox.com/security/data/cve/CVE-2026-97505.md) | High | PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() | 7.3 | 0.0016 | | | [CVE-2026-64589](https://patchblox.com/security/data/cve/CVE-2026-64589.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio... | n/a | 0.0016 | | | [CVE-2026-74465](https://patchblox.com/security/data/cve/CVE-2026-74465.md) | High | net: openvswitch: fix potential UAF on meter attach failure | 7.8 | 0.0015 | | | [CVE-2026-68294](https://patchblox.com/security/data/cve/CVE-2026-68294.md) | High | net: qrtr: restrict socket creation to the initial network namespace | 8.8 | 0.0015 | | | [CVE-2026-72045](https://patchblox.com/security/data/cve/CVE-2026-72045.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72051](https://patchblox.com/security/data/cve/CVE-2026-72051.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-64283](https://patchblox.com/security/data/cve/CVE-2026-64283.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+s... | 7.0 | 0.0015 | | | [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). | 7.8 | 0.0014 | | | [CVE-2026-74378](https://patchblox.com/security/data/cve/CVE-2026-74378.md) | High | bpftool: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (Bjoern Doebel) [Orabug: 40035390] | 7.8 | 0.0014 | | | [CVE-2026-89448](https://patchblox.com/security/data/cve/CVE-2026-89448.md) | High | iommu/vt-d: Force requesting ACS when tboot is enabled | 9.3 | 0.0014 | | | [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 | | | [CVE-2026-74492](https://patchblox.com/security/data/cve/CVE-2026-74492.md) | High | netfilter: ipset: do not update comments from kernel-side hash adds | 8.4 | 0.0014 | | | [CVE-2026-80731](https://patchblox.com/security/data/cve/CVE-2026-80731.md) | High | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | 7.8 | 0.0014 | | | [CVE-2026-64475](https://patchblox.com/security/data/cve/CVE-2026-64475.md) | High | vfio/pci: Release the VGA arbiter client on register_device() failure | 8.8 | 0.0014 | | | [CVE-2026-72459](https://patchblox.com/security/data/cve/CVE-2026-72459.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on al... | 7.8 | 0.0014 | | | [CVE-2026-74739](https://patchblox.com/security/data/cve/CVE-2026-74739.md) | High | net/sched: cls_u32: skip hash tables in u32_bind_class() | 7.8 | 0.0014 | | | [CVE-2026-89564](https://patchblox.com/security/data/cve/CVE-2026-89564.md) | High | ip: orphan prefetched skbs before multicast forwarding | 7.8 | 0.0014 | | | [CVE-2026-74689](https://patchblox.com/security/data/cve/CVE-2026-74689.md) | High | net/atm: fix slab-out-of-bounds read in vcc_setsockopt() | 7.1 | 0.0014 | | | [CVE-2026-74713](https://patchblox.com/security/data/cve/CVE-2026-74713.md) | High | vhost_iotlb: bound map allocation in add_range | 7.1 | 0.0014 | | | [CVE-2026-74310](https://patchblox.com/security/data/cve/CVE-2026-74310.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0014 | | | [CVE-2026-68128](https://patchblox.com/security/data/cve/CVE-2026-68128.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro... | 8.8 | 0.0014 | | | [CVE-2026-68264](https://patchblox.com/security/data/cve/CVE-2026-68264.md) | High | kernel-modules-core: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (Jose Exposito) [RHEL-236583] | 8.8 | 0.0014 | | | [CVE-2026-74631](https://patchblox.com/security/data/cve/CVE-2026-74631.md) | High | net: smc: fix splice entry lifetime imbalance in smc_rx_splice | 8.8 | 0.0014 | | | [CVE-2026-74589](https://patchblox.com/security/data/cve/CVE-2026-74589.md) | High | bpf, sockmap: Fix sk_redir use-after-free in send verdict | 8.4 | 0.0014 | | | [CVE-2026-80932](https://patchblox.com/security/data/cve/CVE-2026-80932.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0014 | | | [CVE-2026-68338](https://patchblox.com/security/data/cve/CVE-2026-68338.md) | High | net/packet: avoid fanout hook re-registration after unregister | 8.8 | 0.0014 | | | [CVE-2026-53400](https://patchblox.com/security/data/cve/CVE-2026-53400.md) | High | i2c: core: fix adapter registration race | 7.8 | 0.0014 | | | [CVE-2026-74601](https://patchblox.com/security/data/cve/CVE-2026-74601.md) | High | ring-buffer: Use current_context for safe per-CPU buffer swap | 7.8 | 0.0014 | | | [CVE-2026-74667](https://patchblox.com/security/data/cve/CVE-2026-74667.md) | High | net/packet: reset the MAC header on the packet-socket transmit path | 7.8 | 0.0014 | | | [CVE-2026-68266](https://patchblox.com/security/data/cve/CVE-2026-68266.md) | High | kernel: drm/xe: Hold a dma-buf reference for imported BOs (CKI Backport Bot) [RHEL-236304] | 7.8 | 0.0014 | | | [CVE-2026-23352](https://patchblox.com/security/data/cve/CVE-2026-23352.md) | High | x86/efi: defer freeing of boot services memory | 7.1 | 0.0013 | | | [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 | | | [CVE-2026-68273](https://patchblox.com/security/data/cve/CVE-2026-68273.md) | High | drm/amdgpu: Fix context pstate override handling | 8.8 | 0.0013 | | | [CVE-2026-68451](https://patchblox.com/security/data/cve/CVE-2026-68451.md) | High | s390/zcrypt: Validate length for CCA ECC private key requests | 8.8 | 0.0013 | | | [CVE-2026-80747](https://patchblox.com/security/data/cve/CVE-2026-80747.md) | High | drm/amdkfd: Add bounds check for CRAT subtype length | 8.0 | 0.0013 | | | [CVE-2026-98080](https://patchblox.com/security/data/cve/CVE-2026-98080.md) | High | btrfs: do not force reloc root creation during qgroup_account_snapshot() | 7.8 | 0.0013 | | | [CVE-2026-74365](https://patchblox.com/security/data/cve/CVE-2026-74365.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0013 | | | [CVE-2026-68258](https://patchblox.com/security/data/cve/CVE-2026-68258.md) | High | drm/amdkfd: Check bounds on CRIU restore queue type and mqd size | 7.1 | 0.0013 | | | [CVE-2026-72012](https://patchblox.com/security/data/cve/CVE-2026-72012.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-68452](https://patchblox.com/security/data/cve/CVE-2026-68452.md) | High | s390/zcrypt: Validate length for CCA AES cipher key requests | 8.8 | 0.0013 | | | [CVE-2026-68454](https://patchblox.com/security/data/cve/CVE-2026-68454.md) | High | KVM: s390: pci: Fix handling of AIF enable without AISB | 8.8 | 0.0013 | | | [CVE-2026-74390](https://patchblox.com/security/data/cve/CVE-2026-74390.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74397](https://patchblox.com/security/data/cve/CVE-2026-74397.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74701](https://patchblox.com/security/data/cve/CVE-2026-74701.md) | High | net/openvswitch: check Ethernet header length in key_extract() | 7.8 | 0.0013 | | | [CVE-2026-89580](https://patchblox.com/security/data/cve/CVE-2026-89580.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74443](https://patchblox.com/security/data/cve/CVE-2026-74443.md) | High | drm/vmwgfx: bound DMA command body size against suffix pointer | 8.8 | 0.0013 | | | [CVE-2026-74515](https://patchblox.com/security/data/cve/CVE-2026-74515.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 | | | [CVE-2026-63987](https://patchblox.com/security/data/cve/CVE-2026-63987.md) | High | kernel-64kb: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). | 7.8 | 0.0013 | | | [CVE-2026-64402](https://patchblox.com/security/data/cve/CVE-2026-64402.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sy... | 7.8 | 0.0013 | | | [CVE-2026-72444](https://patchblox.com/security/data/cve/CVE-2026-72444.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74270](https://patchblox.com/security/data/cve/CVE-2026-74270.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74288](https://patchblox.com/security/data/cve/CVE-2026-74288.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74317](https://patchblox.com/security/data/cve/CVE-2026-74317.md) | High | ixgbe: do not configure xps for XDP queues | 7.8 | 0.0013 | | | [CVE-2026-74330](https://patchblox.com/security/data/cve/CVE-2026-74330.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74377](https://patchblox.com/security/data/cve/CVE-2026-74377.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74440](https://patchblox.com/security/data/cve/CVE-2026-74440.md) | High | kernel-uek64k-modules-core: drm/xe: Wait on external BO kernel fences in exec IOCTL (Matthew Brost) | 7.8 | 0.0013 | | | [CVE-2026-74444](https://patchblox.com/security/data/cve/CVE-2026-74444.md) | High | drm/vmwgfx: validate DRAW_PRIMITIVES header size before division | 7.8 | 0.0013 | | | [CVE-2026-74449](https://patchblox.com/security/data/cve/CVE-2026-74449.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate... | 7.8 | 0.0013 | | | [CVE-2026-74453](https://patchblox.com/security/data/cve/CVE-2026-74453.md) | High | drm/vc4: Zero the tile state data array before each BIN job | 7.8 | 0.0013 | | | [CVE-2026-74467](https://patchblox.com/security/data/cve/CVE-2026-74467.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctl... | 7.8 | 0.0013 | | | [CVE-2026-74551](https://patchblox.com/security/data/cve/CVE-2026-74551.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) DMA-align output buffer Sa... | 7.8 | 0.0013 | | | [CVE-2026-74594](https://patchblox.com/security/data/cve/CVE-2026-74594.md) | High | sched/psi: Shut down rtpoll_timer in psi_cgroup_free() | 7.8 | 0.0013 | | | [CVE-2026-74632](https://patchblox.com/security/data/cve/CVE-2026-74632.md) | High | mm/huge_memory: fix huge_zero_pfn race | 7.8 | 0.0013 | | | [CVE-2026-74663](https://patchblox.com/security/data/cve/CVE-2026-74663.md) | High | net/sched: reject overly deep qdisc hierarchies | 7.8 | 0.0013 | | | [CVE-2026-74666](https://patchblox.com/security/data/cve/CVE-2026-74666.md) | High | packet: synchronize pressure clearing with ring reconfiguration | 7.8 | 0.0013 | | | [CVE-2026-74710](https://patchblox.com/security/data/cve/CVE-2026-74710.md) | High | kernel-uek64k-modules-core: xsk: require at least 16 bytes of TX metadata (Stanislav Fomichev) | 7.8 | 0.0013 | | | [CVE-2026-80540](https://patchblox.com/security/data/cve/CVE-2026-80540.md) | High | drm/amdgpu: Fix UVD decode image min size calculation | 7.8 | 0.0013 | | | [CVE-2026-80613](https://patchblox.com/security/data/cve/CVE-2026-80613.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-80737](https://patchblox.com/security/data/cve/CVE-2026-80737.md) | High | serial: amba-pl011: synchronize DMA teardown | 7.8 | 0.0013 | | | [CVE-2026-80979](https://patchblox.com/security/data/cve/CVE-2026-80979.md) | High | net/smc: unregister the connection before draining the rx tasklet | 7.8 | 0.0013 | | | [CVE-2026-89540](https://patchblox.com/security/data/cve/CVE-2026-89540.md) | High | sunrpc: init gssp_lock before publishing proc entry | 7.8 | 0.0013 | | | [CVE-2026-93813](https://patchblox.com/security/data/cve/CVE-2026-93813.md) | High | btrfs: tree-checker: validate INODE_REF's namelen | 7.8 | 0.0013 | | | [CVE-2026-97421](https://patchblox.com/security/data/cve/CVE-2026-97421.md) | High | RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() | 7.8 | 0.0013 | | | [CVE-2026-74630](https://patchblox.com/security/data/cve/CVE-2026-74630.md) | High | ipv6: prevent in6_dev_get() from resurrecting inet6_dev | 7.8 | 0.0013 | | | [CVE-2026-80664](https://patchblox.com/security/data/cve/CVE-2026-80664.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0013 | | | [CVE-2026-74313](https://patchblox.com/security/data/cve/CVE-2026-74313.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 | | | [CVE-2026-74615](https://patchblox.com/security/data/cve/CVE-2026-74615.md) | High | vxlan: do not arm the ageing timer on a device that is down | 8.8 | 0.0013 | | | [CVE-2026-64103](https://patchblox.com/security/data/cve/CVE-2026-64103.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal... | 7.8 | 0.0013 | | | [CVE-2026-64372](https://patchblox.com/security/data/cve/CVE-2026-64372.md) | High | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | 7.8 | 0.0013 | | | [CVE-2026-74257](https://patchblox.com/security/data/cve/CVE-2026-74257.md) | High | sockmap: Fix use-after-free in udp_bpf_recvmsg() | 7.8 | 0.0013 | | | [CVE-2026-74289](https://patchblox.com/security/data/cve/CVE-2026-74289.md) | High | ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). | 7.8 | 0.0013 | | | [CVE-2026-74302](https://patchblox.com/security/data/cve/CVE-2026-74302.md) | High | Bluetooth: hci_core: Fix UAF in hci_unregister_dev() | 7.8 | 0.0013 | | | [CVE-2026-74359](https://patchblox.com/security/data/cve/CVE-2026-74359.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74363](https://patchblox.com/security/data/cve/CVE-2026-74363.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74388](https://patchblox.com/security/data/cve/CVE-2026-74388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Fix UAF at handling events with... | 7.8 | 0.0013 | | | [CVE-2026-74450](https://patchblox.com/security/data/cve/CVE-2026-74450.md) | High | drm/amd/pm: fix pptable use-after-free | 7.8 | 0.0013 | | | [CVE-2026-74471](https://patchblox.com/security/data/cve/CVE-2026-74471.md) | High | tracing: Check return value of __register_event() in trace_module_add_events() | 7.8 | 0.0013 | | | [CVE-2026-74479](https://patchblox.com/security/data/cve/CVE-2026-74479.md) | High | net: pktgen: fix proc entry use-after-free | 7.8 | 0.0013 | | | [CVE-2026-74609](https://patchblox.com/security/data/cve/CVE-2026-74609.md) | High | tipc: read le->link under the node lock in tipc_node_link_down() | 7.8 | 0.0013 | | | [CVE-2026-74637](https://patchblox.com/security/data/cve/CVE-2026-74637.md) | High | perf/core: Fix group leader use-after-free after sibling detach | 7.8 | 0.0013 | | | [CVE-2026-74660](https://patchblox.com/security/data/cve/CVE-2026-74660.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74700](https://patchblox.com/security/data/cve/CVE-2026-74700.md) | High | net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers | 7.8 | 0.0013 | | | [CVE-2026-89508](https://patchblox.com/security/data/cve/CVE-2026-89508.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-89548](https://patchblox.com/security/data/cve/CVE-2026-89548.md) | High | SUNRPC: always drain cache_cleaner before destroying a cache_detail | 7.8 | 0.0013 | | | [CVE-2026-92510](https://patchblox.com/security/data/cve/CVE-2026-92510.md) | High | RDMA/core: Fix potential use after free in ib_destroy_srq_user() | 7.8 | 0.0013 | | | [CVE-2026-92511](https://patchblox.com/security/data/cve/CVE-2026-92511.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74726](https://patchblox.com/security/data/cve/CVE-2026-74726.md) | High | bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor | 7.3 | 0.0013 | | | [CVE-2026-72460](https://patchblox.com/security/data/cve/CVE-2026-72460.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: check label build before no_new_privs... | 7.1 | 0.0013 | | | [CVE-2026-74349](https://patchblox.com/security/data/cve/CVE-2026-74349.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 | | | [CVE-2026-74485](https://patchblox.com/security/data/cve/CVE-2026-74485.md) | High | binfmt_misc: reject a flag character as the field delimiter | 7.1 | 0.0013 | | | [CVE-2026-74603](https://patchblox.com/security/data/cve/CVE-2026-74603.md) | High | ptp: ocp: Fix board ID over-read | 7.1 | 0.0013 | | | [CVE-2026-80663](https://patchblox.com/security/data/cve/CVE-2026-80663.md) | High | cpupower: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). | 7.1 | 0.0013 | | | [CVE-2026-64580](https://patchblox.com/security/data/cve/CVE-2026-64580.md) | High | xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() | 7.8 | 0.0013 | | | [CVE-2026-68290](https://patchblox.com/security/data/cve/CVE-2026-68290.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down... | 7.8 | 0.0013 | | | [CVE-2026-74513](https://patchblox.com/security/data/cve/CVE-2026-74513.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dibs: fix use-after-free of dmb_node in loopback... | 7.8 | 0.0013 | | | [CVE-2026-74725](https://patchblox.com/security/data/cve/CVE-2026-74725.md) | High | enic: fix tx_hang_reset use-after-free on device removal | 7.8 | 0.0013 | | | [CVE-2026-80716](https://patchblox.com/security/data/cve/CVE-2026-80716.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 | | | [CVE-2026-64213](https://patchblox.com/security/data/cve/CVE-2026-64213.md) | High | hwmon: (lm90) Add lock protection to lm90_alert | 7.1 | 0.0012 | | | [CVE-2026-93782](https://patchblox.com/security/data/cve/CVE-2026-93782.md) | High | vhost-scsi: flush backend after device ioctls | 7.8 | 0.0012 | | | [CVE-2026-98030](https://patchblox.com/security/data/cve/CVE-2026-98030.md) | High | net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size | 7.8 | 0.0012 | | | [CVE-2026-93810](https://patchblox.com/security/data/cve/CVE-2026-93810.md) | High | cachefiles: Fix double fput | 7.8 | 0.0012 | | | [CVE-2026-74579](https://patchblox.com/security/data/cve/CVE-2026-74579.md) | High | netfilter: nft_payload: fix mask build for partial field offload | 7.1 | 0.0012 | | | [CVE-2026-64405](https://patchblox.com/security/data/cve/CVE-2026-64405.md) | High | Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() | 7.1 | 0.0012 | | | [CVE-2026-74564](https://patchblox.com/security/data/cve/CVE-2026-74564.md) | High | netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH | 7.1 | 0.0012 | | | [CVE-2026-80580](https://patchblox.com/security/data/cve/CVE-2026-80580.md) | High | fbdev: bound mode sysfs output to the sysfs buffer | 7.8 | 0.0011 | | | [CVE-2026-68382](https://patchblox.com/security/data/cve/CVE-2026-68382.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown... | 7.8 | 0.0011 | | | [CVE-2026-68148](https://patchblox.com/security/data/cve/CVE-2026-68148.md) | High | fscrypt: Add missing superblock check in find_or_insert_direct_key() | 7.8 | 0.0009 | | | [CVE-2026-74595](https://patchblox.com/security/data/cve/CVE-2026-74595.md) | High | fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() | 7.8 | 0.0009 | | | [CVE-2026-89603](https://patchblox.com/security/data/cve/CVE-2026-89603.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | n/a | | | [CVE-2026-72106](https://patchblox.com/security/data/cve/CVE-2026-72106.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0023 | | | [CVE-2026-63890](https://patchblox.com/security/data/cve/CVE-2026-63890.md) | Routine | kernel-64kb: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). | n/a | 0.0023 | | | [CVE-2026-72337](https://patchblox.com/security/data/cve/CVE-2026-72337.md) | Routine | Bluetooth: 6lowpan: avoid untracked enable work | 6.4 | 0.0022 | | | [CVE-2026-72325](https://patchblox.com/security/data/cve/CVE-2026-72325.md) | Routine | perf/x86/amd/core: Avoid enabling BRS from the SVM reload path | 5.5 | 0.0022 | | | [CVE-2026-72321](https://patchblox.com/security/data/cve/CVE-2026-72321.md) | Routine | ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() | 3.1 | 0.0022 | | | [CVE-2026-72063](https://patchblox.com/security/data/cve/CVE-2026-72063.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72070](https://patchblox.com/security/data/cve/CVE-2026-72070.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72224](https://patchblox.com/security/data/cve/CVE-2026-72224.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72349](https://patchblox.com/security/data/cve/CVE-2026-72349.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72447](https://patchblox.com/security/data/cve/CVE-2026-72447.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-80647](https://patchblox.com/security/data/cve/CVE-2026-80647.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQ... | n/a | 0.0022 | | | [CVE-2026-90417](https://patchblox.com/security/data/cve/CVE-2026-90417.md) | Routine | RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() | 5.5 | 0.0022 | | | [CVE-2026-92503](https://patchblox.com/security/data/cve/CVE-2026-92503.md) | Routine | ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() | 5.5 | 0.0022 | | | [CVE-2026-89673](https://patchblox.com/security/data/cve/CVE-2026-89673.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.3 | 0.0022 | | | [CVE-2026-90088](https://patchblox.com/security/data/cve/CVE-2026-90088.md) | Routine | Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop | 6.5 | 0.0022 | | | [CVE-2026-72138](https://patchblox.com/security/data/cve/CVE-2026-72138.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72163](https://patchblox.com/security/data/cve/CVE-2026-72163.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72166](https://patchblox.com/security/data/cve/CVE-2026-72166.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72256](https://patchblox.com/security/data/cve/CVE-2026-72256.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72392](https://patchblox.com/security/data/cve/CVE-2026-72392.md) | Routine | ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump | 5.5 | 0.0022 | | | [CVE-2026-72433](https://patchblox.com/security/data/cve/CVE-2026-72433.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-74284](https://patchblox.com/security/data/cve/CVE-2026-74284.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-89784](https://patchblox.com/security/data/cve/CVE-2026-89784.md) | Routine | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | 5.5 | 0.0022 | | | [CVE-2026-90074](https://patchblox.com/security/data/cve/CVE-2026-90074.md) | Routine | net/sched: fq_pie: clamp default quantum to avoid signed overflow | 5.5 | 0.0022 | | | [CVE-2026-90218](https://patchblox.com/security/data/cve/CVE-2026-90218.md) | Routine | RDMA/cma: Fix WARNING in res_to_rt | 5.5 | 0.0022 | | | [CVE-2026-90307](https://patchblox.com/security/data/cve/CVE-2026-90307.md) | Routine | RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ | 5.5 | 0.0022 | | | [CVE-2026-90434](https://patchblox.com/security/data/cve/CVE-2026-90434.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 4.4 | 0.0022 | | | [CVE-2026-72023](https://patchblox.com/security/data/cve/CVE-2026-72023.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix SQB pointer leak on init failu... | n/a | 0.0022 | | | [CVE-2026-72025](https://patchblox.com/security/data/cve/CVE-2026-72025.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with differe... | n/a | 0.0022 | | | [CVE-2026-89780](https://patchblox.com/security/data/cve/CVE-2026-89780.md) | Routine | kernel-64kb: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). | n/a | 0.0022 | | | [CVE-2026-72379](https://patchblox.com/security/data/cve/CVE-2026-72379.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-72437](https://patchblox.com/security/data/cve/CVE-2026-72437.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-74735](https://patchblox.com/security/data/cve/CVE-2026-74735.md) | Routine | kernel-uek64k-modules-core: l2tp: fix tunnel and session refcount leak on seq_file release (Eric Dumazet) [Orabug: 39972719] | 4.4 | 0.0022 | | | [CVE-2026-74386](https://patchblox.com/security/data/cve/CVE-2026-74386.md) | Routine | nvmet-tcp: fix page fragment cache leak in error path | 5.9 | 0.0021 | | | [CVE-2026-80847](https://patchblox.com/security/data/cve/CVE-2026-80847.md) | Routine | tcp: clamp route advmss to TCP_MIN_MSS | 5.5 | 0.0021 | | | [CVE-2026-72086](https://patchblox.com/security/data/cve/CVE-2026-72086.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-90265](https://patchblox.com/security/data/cve/CVE-2026-90265.md) | Routine | btrfs: defrag: fix deadlock between defrag and delalloc space reservation | 5.5 | 0.0021 | | | [CVE-2026-72413](https://patchblox.com/security/data/cve/CVE-2026-72413.md) | Routine | sctp: fix err_chunk memory leaks in INIT handling | 5.9 | 0.0021 | | | [CVE-2026-72017](https://patchblox.com/security/data/cve/CVE-2026-72017.md) | Routine | kernel-uek64k-modules-core: net: macb: drop in-flight Tx SKBs on close (Theo Lebrun) | 5.5 | 0.0021 | | | [CVE-2026-72161](https://patchblox.com/security/data/cve/CVE-2026-72161.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-72237](https://patchblox.com/security/data/cve/CVE-2026-72237.md) | Routine | kernel-uek: perf/x86/amd/brs: Fix kernel address leakage (Sandipan Das) | 5.5 | 0.0021 | | | [CVE-2026-89539](https://patchblox.com/security/data/cve/CVE-2026-89539.md) | Routine | SUNRPC: reject duplicate CREDS_VALUE options | 4.4 | 0.0021 | | | [CVE-2026-72147](https://patchblox.com/security/data/cve/CVE-2026-72147.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without... | n/a | 0.0021 | | | [CVE-2026-74261](https://patchblox.com/security/data/cve/CVE-2026-74261.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: avoid stale FIFO cells during resize... | n/a | 0.0021 | | | [CVE-2026-97934](https://patchblox.com/security/data/cve/CVE-2026-97934.md) | Routine | tracing: Fix memory corruption from a "STACKTRACE" histogram key | 6.7 | 0.0021 | | | [CVE-2026-89531](https://patchblox.com/security/data/cve/CVE-2026-89531.md) | Routine | svcrdma: Reject connection when transport allocation fails | 5.9 | 0.0021 | | | [CVE-2026-80629](https://patchblox.com/security/data/cve/CVE-2026-80629.md) | Routine | octeontx2-af: npc: Fix size of entry2cntr_map | 5.5 | 0.0021 | | | [CVE-2026-90182](https://patchblox.com/security/data/cve/CVE-2026-90182.md) | Routine | blk-iocost: clear delay state when freeing policy data | 5.5 | 0.0021 | | | [CVE-2026-89931](https://patchblox.com/security/data/cve/CVE-2026-89931.md) | Routine | KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit | 5.3 | 0.0021 | | | [CVE-2026-89453](https://patchblox.com/security/data/cve/CVE-2026-89453.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 4.4 | 0.0021 | | | [CVE-2026-80984](https://patchblox.com/security/data/cve/CVE-2026-80984.md) | Routine | kernel-64kb: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). | n/a | 0.0021 | | | [CVE-2026-90183](https://patchblox.com/security/data/cve/CVE-2026-90183.md) | Routine | kernel-64kb: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). | n/a | 0.0021 | | | [CVE-2026-90065](https://patchblox.com/security/data/cve/CVE-2026-90065.md) | Routine | net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure | n/a | 0.0020 | | | [CVE-2026-93269](https://patchblox.com/security/data/cve/CVE-2026-93269.md) | Routine | ext4: fix circular lock dependency in ext4_ext_migrate | 4.7 | 0.0020 | | | [CVE-2026-80846](https://patchblox.com/security/data/cve/CVE-2026-80846.md) | Routine | xfrm: drop ESP-in-TCP packets with no ingress device | 5.9 | 0.0020 | | | [CVE-2026-80848](https://patchblox.com/security/data/cve/CVE-2026-80848.md) | Routine | xfrm: espintcp: fix UAF during close | 5.9 | 0.0020 | | | [CVE-2026-74382](https://patchblox.com/security/data/cve/CVE-2026-74382.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0020 | | | [CVE-2026-80793](https://patchblox.com/security/data/cve/CVE-2026-80793.md) | Routine | ipv4: reject undersized MTUs in ip_do_fragment() | 5.5 | 0.0020 | | | [CVE-2026-80805](https://patchblox.com/security/data/cve/CVE-2026-80805.md) | Routine | xfs: validate attr entry pointer before field access | 4.4 | 0.0020 | | | [CVE-2026-72439](https://patchblox.com/security/data/cve/CVE-2026-72439.md) | Routine | md/raid10: fix writes_pending leak on write request failures | 1.9 | 0.0019 | | | [CVE-2026-89525](https://patchblox.com/security/data/cve/CVE-2026-89525.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.7 | 0.0018 | | | [CVE-2026-64476](https://patchblox.com/security/data/cve/CVE-2026-64476.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When... | 5.5 | 0.0018 | | | [CVE-2026-74307](https://patchblox.com/security/data/cve/CVE-2026-74307.md) | Routine | ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT | 5.5 | 0.0018 | | | [CVE-2026-93104](https://patchblox.com/security/data/cve/CVE-2026-93104.md) | Routine | RDMA/rvt: Return NULL after port allocation failure | 5.5 | 0.0018 | | | [CVE-2026-93103](https://patchblox.com/security/data/cve/CVE-2026-93103.md) | Routine | RDMA/hfi1: Preserve unit 0 on allocation failure | 6.4 | 0.0018 | | | [CVE-2026-93110](https://patchblox.com/security/data/cve/CVE-2026-93110.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.4 | 0.0018 | | | [CVE-2026-74464](https://patchblox.com/security/data/cve/CVE-2026-74464.md) | Routine | net: openvswitch: fix skb leak on flow key update failure during ct | 5.5 | 0.0018 | | | [CVE-2026-74487](https://patchblox.com/security/data/cve/CVE-2026-74487.md) | Routine | binfmt_misc: restore write access when removing an entry | 5.5 | 0.0018 | | | [CVE-2026-74622](https://patchblox.com/security/data/cve/CVE-2026-74622.md) | Routine | net: atlantic: free RX pages of consumed but not refilled buffers | 5.5 | 0.0018 | | | [CVE-2026-74671](https://patchblox.com/security/data/cve/CVE-2026-74671.md) | Routine | ima: fix out-of-bounds read in xattr_verify() | 5.5 | 0.0018 | | | [CVE-2026-80679](https://patchblox.com/security/data/cve/CVE-2026-80679.md) | Routine | s390/dasd: Fix potential NULL pointer dereference | 5.5 | 0.0018 | | | [CVE-2026-74719](https://patchblox.com/security/data/cve/CVE-2026-74719.md) | Routine | net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() | 3.7 | 0.0018 | | | [CVE-2026-80983](https://patchblox.com/security/data/cve/CVE-2026-80983.md) | Routine | net/smc: fix socket refcount leak in smc_switch_conns() | 2.5 | 0.0018 | | | [CVE-2026-72448](https://patchblox.com/security/data/cve/CVE-2026-72448.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on... | n/a | 0.0018 | | | [CVE-2026-64474](https://patchblox.com/security/data/cve/CVE-2026-64474.md) | Routine | vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | 5.5 | 0.0018 | | | [CVE-2026-97477](https://patchblox.com/security/data/cve/CVE-2026-97477.md) | Routine | RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() | 3.6 | 0.0017 | | | [CVE-2026-64542](https://patchblox.com/security/data/cve/CVE-2026-64542.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_... | 5.5 | 0.0017 | | | [CVE-2026-74278](https://patchblox.com/security/data/cve/CVE-2026-74278.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2026-74290](https://patchblox.com/security/data/cve/CVE-2026-74290.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2026-74308](https://patchblox.com/security/data/cve/CVE-2026-74308.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2026-74600](https://patchblox.com/security/data/cve/CVE-2026-74600.md) | Routine | mm/page_table_check: skip special zero mappings | 5.5 | 0.0017 | | | [CVE-2026-74636](https://patchblox.com/security/data/cve/CVE-2026-74636.md) | Routine | tracing: Fix race between update_event_fields and, event_define_fields | 5.5 | 0.0017 | | | [CVE-2026-80739](https://patchblox.com/security/data/cve/CVE-2026-80739.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2026-92523](https://patchblox.com/security/data/cve/CVE-2026-92523.md) | Routine | RDMA/nldev: validate dynamic counter attribute length | 5.5 | 0.0017 | | | [CVE-2026-89644](https://patchblox.com/security/data/cve/CVE-2026-89644.md) | Routine | kernel-uek64k-modules-core: btrfs: fix extent map leak in NOCOW direct I/O write (Shuangpeng Bai) [Orabug: 40021561] | 3.3 | 0.0017 | | | [CVE-2026-74659](https://patchblox.com/security/data/cve/CVE-2026-74659.md) | Routine | net: bridge: mrp: fix uninitialised bytes on the wire | 2.3 | 0.0017 | | | [CVE-2026-93102](https://patchblox.com/security/data/cve/CVE-2026-93102.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 2.3 | 0.0017 | | | [CVE-2026-74389](https://patchblox.com/security/data/cve/CVE-2026-74389.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure... | n/a | 0.0017 | | | [CVE-2026-45872](https://patchblox.com/security/data/cve/CVE-2026-45872.md) | Routine | kernel-64kb: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). | 5.5 | 0.0017 | | | [CVE-2026-64579](https://patchblox.com/security/data/cve/CVE-2026-64579.md) | Routine | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert | 5.5 | 0.0017 | | | [CVE-2026-93829](https://patchblox.com/security/data/cve/CVE-2026-93829.md) | Routine | smb: client: fix races in cifsd thread creation | 6.7 | 0.0017 | | | [CVE-2026-74536](https://patchblox.com/security/data/cve/CVE-2026-74536.md) | Routine | kernel-uek64k-modules-core: Bluetooth: ISO: fix leaking sk after socket release (Pauli Virtanen) | 5.5 | 0.0017 | | | [CVE-2026-74718](https://patchblox.com/security/data/cve/CVE-2026-74718.md) | Routine | devlink: fix net namespace reference leak in reload | 5.5 | 0.0017 | | | [CVE-2026-98003](https://patchblox.com/security/data/cve/CVE-2026-98003.md) | Routine | iommu/amd: Do not reallocate GA log buffers on resume | 5.5 | 0.0017 | | | [CVE-2026-74375](https://patchblox.com/security/data/cve/CVE-2026-74375.md) | Routine | md/raid1,raid10: fix deadlock in read error recovery path | 4.1 | 0.0017 | | | [CVE-2026-93794](https://patchblox.com/security/data/cve/CVE-2026-93794.md) | Routine | smb/client: flush dirty data before punching a hole | 3.3 | 0.0017 | | | [CVE-2026-74638](https://patchblox.com/security/data/cve/CVE-2026-74638.md) | Routine | drm/v3d: Serialize the scheduler timeout handlers | 4.7 | 0.0017 | | | [CVE-2026-68441](https://patchblox.com/security/data/cve/CVE-2026-68441.md) | Routine | net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains | 4.4 | 0.0017 | | | [CVE-2026-80756](https://patchblox.com/security/data/cve/CVE-2026-80756.md) | Routine | selinux: do not cancel a policy conversion that never started | 4.4 | 0.0017 | | | [CVE-2026-74553](https://patchblox.com/security/data/cve/CVE-2026-74553.md) | Routine | hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 | 6.0 | 0.0016 | | | [CVE-2026-74555](https://patchblox.com/security/data/cve/CVE-2026-74555.md) | Routine | kernel-uek64k-modules-core: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (Xingui Yang) | 5.5 | 0.0016 | | | [CVE-2026-64297](https://patchblox.com/security/data/cve/CVE-2026-64297.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module... | 5.5 | 0.0016 | | | [CVE-2026-80785](https://patchblox.com/security/data/cve/CVE-2026-80785.md) | Routine | fbdev: serialize mode sysfs access with lock_fb_info() | 6.3 | 0.0016 | | | [CVE-2026-98164](https://patchblox.com/security/data/cve/CVE-2026-98164.md) | Routine | KVM: x86/mmu: Check write tracking in all address spaces | 5.5 | 0.0015 | | | [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 | | | [CVE-2026-64425](https://patchblox.com/security/data/cve/CVE-2026-64425.md) | Routine | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | 5.5 | 0.0013 | | | [CVE-2026-45836](https://patchblox.com/security/data/cve/CVE-2026-45836.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() | 5.5 | 0.0013 | | | [CVE-2026-64205](https://patchblox.com/security/data/cve/CVE-2026-64205.md) | Routine | i2c: i801: fix hardware state machine corruption in error path | 5.5 | 0.0013 | | Showing 500 of 508 CVEs; the web page lists them all. --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.