{
  "fix": "SUSE-SU-2026:4940-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4940-1",
  "summary": "SUSE-SU-2026:4940-1, released November 7, 2026, fixes 108 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_22 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_22 security update",
  "released": "2026-11-07T00:43:02Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-99999, rated Critical",
  "supported": true,
  "cveCount": 108,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00841,
  "maxCvss": 9.9,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:4940-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_22",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-22",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-99999",
      "url": "https://patchblox.com/security/cve/CVE-2026-99999",
      "title": "ipv4: validate checksum_start before completing checksum",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72041",
      "url": "https://patchblox.com/security/cve/CVE-2026-72041",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  espintcp: use sk_msg_free_partial to fix partial...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89778",
      "url": "https://patchblox.com/security/cve/CVE-2026-89778",
      "title": "isofs: fix out-of-bounds page array access on empty zisofs block",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00697,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98323",
      "url": "https://patchblox.com/security/cve/CVE-2026-98323",
      "title": "RDMA/siw: Bound fragmented header copies by the remaining length",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98365",
      "url": "https://patchblox.com/security/cve/CVE-2026-98365",
      "title": "RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00377,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63983",
      "url": "https://patchblox.com/security/cve/CVE-2026-63983",
      "title": "net/sched: fix packet loop on netem when duplicate is on",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98269",
      "url": "https://patchblox.com/security/cve/CVE-2026-98269",
      "title": "btrfs: abort transaction on failure to update inode for hole punching and reflinking",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98352",
      "url": "https://patchblox.com/security/cve/CVE-2026-98352",
      "title": "RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98253",
      "url": "https://patchblox.com/security/cve/CVE-2026-98253",
      "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64070",
      "url": "https://patchblox.com/security/cve/CVE-2026-64070",
      "title": "powerpc/hv-gpci: fix preempt count leak in sysfs show paths",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98252",
      "url": "https://patchblox.com/security/cve/CVE-2026-98252",
      "title": "RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90011",
      "url": "https://patchblox.com/security/cve/CVE-2026-90011",
      "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72319",
      "url": "https://patchblox.com/security/cve/CVE-2026-72319",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00745,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89528",
      "url": "https://patchblox.com/security/cve/CVE-2026-89528",
      "title": "svcrdma: Reject Read lists that exceed the page budget",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00707,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89669",
      "url": "https://patchblox.com/security/cve/CVE-2026-89669",
      "title": "nfsd: initialize copy-notify stateid before publishing it",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89685",
      "url": "https://patchblox.com/security/cve/CVE-2026-89685",
      "title": "nfsd: fix clock domain mismatch in clients_still_reclaiming()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00612,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97555",
      "url": "https://patchblox.com/security/cve/CVE-2026-97555",
      "title": "smb: client: fix heap overflow in DACL owner/group rewrite",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89706",
      "url": "https://patchblox.com/security/cve/CVE-2026-89706",
      "title": "kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64116",
      "url": "https://patchblox.com/security/cve/CVE-2026-64116",
      "title": "kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74587",
      "url": "https://patchblox.com/security/cve/CVE-2026-74587",
      "title": "sctp: fix use-after-free of cached ASCONF chunk",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74611",
      "url": "https://patchblox.com/security/cve/CVE-2026-74611",
      "title": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74723",
      "url": "https://patchblox.com/security/cve/CVE-2026-74723",
      "title": "btrfs: lzo: reject inline extents without valid headers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98130",
      "url": "https://patchblox.com/security/cve/CVE-2026-98130",
      "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43184",
      "url": "https://patchblox.com/security/cve/CVE-2026-43184",
      "title": "kernel-64kb: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00444,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63830",
      "url": "https://patchblox.com/security/cve/CVE-2026-63830",
      "title": "net: skmsg: preserve sg.copy across SG transforms",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72493",
      "url": "https://patchblox.com/security/cve/CVE-2026-72493",
      "title": "net: serialize netif_running() check in enqueue_to_backlog()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.9,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98357",
      "url": "https://patchblox.com/security/cve/CVE-2026-98357",
      "title": "IB/isert: wait for deferred control PDU completions before releasing the connection",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98173",
      "url": "https://patchblox.com/security/cve/CVE-2026-98173",
      "title": "smb: client: fix use-after-free of iface in cifs_try_adding_channels()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93787",
      "url": "https://patchblox.com/security/cve/CVE-2026-93787",
      "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97595",
      "url": "https://patchblox.com/security/cve/CVE-2026-97595",
      "title": "mac802154: fix use-after-free of sdata via queued RX frames",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93806",
      "url": "https://patchblox.com/security/cve/CVE-2026-93806",
      "title": "wifi: cfg80211: validate assoc response length before status and IE access",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97564",
      "url": "https://patchblox.com/security/cve/CVE-2026-97564",
      "title": "smb: client: reject userspace cifs.idmap descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93134",
      "url": "https://patchblox.com/security/cve/CVE-2026-93134",
      "title": "printk: Fix possible console use-after-free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97571",
      "url": "https://patchblox.com/security/cve/CVE-2026-97571",
      "title": "bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98248",
      "url": "https://patchblox.com/security/cve/CVE-2026-98248",
      "title": "arm64: percpu: Fix LSE operations on {8,16}-bit types",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90101",
      "url": "https://patchblox.com/security/cve/CVE-2026-90101",
      "title": "bnxt_en: Fix call to hardware monitoring event handler",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90430",
      "url": "https://patchblox.com/security/cve/CVE-2026-90430",
      "title": "kernel-64kb: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991).",
      "priority": "High",
      "severity": "important",
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90315",
      "url": "https://patchblox.com/security/cve/CVE-2026-90315",
      "title": "kernel-64kb: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98260",
      "url": "https://patchblox.com/security/cve/CVE-2026-98260",
      "title": "exec: Cleanup POSIX timers right after de_thread()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64461",
      "url": "https://patchblox.com/security/cve/CVE-2026-64461",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: mediatek: Fix IRQ domain leak when port fai...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98015",
      "url": "https://patchblox.com/security/cve/CVE-2026-98015",
      "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89811",
      "url": "https://patchblox.com/security/cve/CVE-2026-89811",
      "title": "drm/amdkfd: Add TLB flush after MES queue eviction/suspension",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98089",
      "url": "https://patchblox.com/security/cve/CVE-2026-98089",
      "title": "bonding: alb: fix uninitialized transport header access in alb_determine_nd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93820",
      "url": "https://patchblox.com/security/cve/CVE-2026-93820",
      "title": "PCI: rockchip: Protect root bus removal with rescan lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93822",
      "url": "https://patchblox.com/security/cve/CVE-2026-93822",
      "title": "PCI: iproc: Protect root bus removal with rescan lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98016",
      "url": "https://patchblox.com/security/cve/CVE-2026-98016",
      "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80893",
      "url": "https://patchblox.com/security/cve/CVE-2026-80893",
      "title": "mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64280",
      "url": "https://patchblox.com/security/cve/CVE-2026-64280",
      "title": "fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72172",
      "url": "https://patchblox.com/security/cve/CVE-2026-72172",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72301",
      "url": "https://patchblox.com/security/cve/CVE-2026-72301",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90289",
      "url": "https://patchblox.com/security/cve/CVE-2026-90289",
      "title": "kernel-64kb: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72213",
      "url": "https://patchblox.com/security/cve/CVE-2026-72213",
      "title": "kernel-uek64k-modules-core: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (Deepanshu Kartikey)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74578",
      "url": "https://patchblox.com/security/cve/CVE-2026-74578",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74614",
      "url": "https://patchblox.com/security/cve/CVE-2026-74614",
      "title": "vsock/virtio: read virtqueues under worker locks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64422",
      "url": "https://patchblox.com/security/cve/CVE-2026-64422",
      "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97415",
      "url": "https://patchblox.com/security/cve/CVE-2026-97415",
      "title": "btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43091",
      "url": "https://patchblox.com/security/cve/CVE-2026-43091",
      "title": "kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74544",
      "url": "https://patchblox.com/security/cve/CVE-2026-74544",
      "title": "net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98360",
      "url": "https://patchblox.com/security/cve/CVE-2026-98360",
      "title": "RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74312",
      "url": "https://patchblox.com/security/cve/CVE-2026-74312",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80977",
      "url": "https://patchblox.com/security/cve/CVE-2026-80977",
      "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64424",
      "url": "https://patchblox.com/security/cve/CVE-2026-64424",
      "title": "netpoll: fix a use-after-free on shutdown path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98216",
      "url": "https://patchblox.com/security/cve/CVE-2026-98216",
      "title": "IB/hfi1: Fix the PIO_CRED credit-return mmap",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64428",
      "url": "https://patchblox.com/security/cve/CVE-2026-64428",
      "title": "gpio: sch: use raw_spinlock_t in the irq startup path",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-92488",
      "url": "https://patchblox.com/security/cve/CVE-2026-92488",
      "title": "kernel-64kb: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979).",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98367",
      "url": "https://patchblox.com/security/cve/CVE-2026-98367",
      "title": "RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43283",
      "url": "https://patchblox.com/security/cve/CVE-2026-43283",
      "title": "kernel-64kb: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74583",
      "url": "https://patchblox.com/security/cve/CVE-2026-74583",
      "title": "net/sched: cls_route: fix fastmap use-after-free on filter",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98359",
      "url": "https://patchblox.com/security/cve/CVE-2026-98359",
      "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98366",
      "url": "https://patchblox.com/security/cve/CVE-2026-98366",
      "title": "RDMA/rxe: validate access flags before swapping the MR\u0027s PD",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80579",
      "url": "https://patchblox.com/security/cve/CVE-2026-80579",
      "title": "fbdev: clear fb_info-\u003Emode before deleting a videomode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68323",
      "url": "https://patchblox.com/security/cve/CVE-2026-68323",
      "title": "tipc: serialize udp bearer replicast list updates",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90283",
      "url": "https://patchblox.com/security/cve/CVE-2026-90283",
      "title": "kernel-uek64k-modules-core: hugetlbfs: release subpool on fill_super failure (Chenyichong) [Orabug: 40042090]",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.7,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72236",
      "url": "https://patchblox.com/security/cve/CVE-2026-72236",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  s390/perf_cpum_cf: Add missing array_index_nospe...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89987",
      "url": "https://patchblox.com/security/cve/CVE-2026-89987",
      "title": "mm/huge_memory: transfer the pmd dirty bit to the folio on zap",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72015",
      "url": "https://patchblox.com/security/cve/CVE-2026-72015",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98077",
      "url": "https://patchblox.com/security/cve/CVE-2026-98077",
      "title": "netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93252",
      "url": "https://patchblox.com/security/cve/CVE-2026-93252",
      "title": "ocfs2: fix circular locking dependency in ocfs2_init_acl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72081",
      "url": "https://patchblox.com/security/cve/CVE-2026-72081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: elx: efct: Fix I/O leak on unsupported add...",
      "priority": "Routine",
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68242",
      "url": "https://patchblox.com/security/cve/CVE-2026-68242",
      "title": "drm/i915/gt: Fix NULL deref on sched_engine alloc failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72040",
      "url": "https://patchblox.com/security/cve/CVE-2026-72040",
      "title": "kernel-uek64k-modules-core: ipmi: fix refcount leak in i_ipmi_request() (Wentao Liang)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72305",
      "url": "https://patchblox.com/security/cve/CVE-2026-72305",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68241",
      "url": "https://patchblox.com/security/cve/CVE-2026-68241",
      "title": "drm/i915/mst: limit DP MST ESI service loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.6,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97945",
      "url": "https://patchblox.com/security/cve/CVE-2026-97945",
      "title": "x86/mm: Fix user-space data loss with MADV_FREE and THP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72212",
      "url": "https://patchblox.com/security/cve/CVE-2026-72212",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97574",
      "url": "https://patchblox.com/security/cve/CVE-2026-97574",
      "title": "bnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure",
      "priority": "Routine",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68358",
      "url": "https://patchblox.com/security/cve/CVE-2025-68358",
      "title": "kernel-64kb: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98010",
      "url": "https://patchblox.com/security/cve/CVE-2026-98010",
      "title": "net/sched: drr: clamp quantum in change class",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98347",
      "url": "https://patchblox.com/security/cve/CVE-2026-98347",
      "title": "IB/IPoIB: Avoid restoring OPER_UP after multicast flush",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93222",
      "url": "https://patchblox.com/security/cve/CVE-2026-93222",
      "title": "signal: avoid shared siginfo namespace rewrites",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.4,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93800",
      "url": "https://patchblox.com/security/cve/CVE-2026-93800",
      "title": "btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97416",
      "url": "https://patchblox.com/security/cve/CVE-2026-97416",
      "title": "btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74379",
      "url": "https://patchblox.com/security/cve/CVE-2026-74379",
      "title": "bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93821",
      "url": "https://patchblox.com/security/cve/CVE-2026-93821",
      "title": "PCI: altera: Protect root bus removal with rescan lock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.2,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68233",
      "url": "https://patchblox.com/security/cve/CVE-2026-68233",
      "title": "drm/vc4: Shut down BO cache timer before teardown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97491",
      "url": "https://patchblox.com/security/cve/CVE-2026-97491",
      "title": "net/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74653",
      "url": "https://patchblox.com/security/cve/CVE-2026-74653",
      "title": "serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98273",
      "url": "https://patchblox.com/security/cve/CVE-2026-98273",
      "title": "x86/kprobes: Fix crash when probing CS CALL instructions",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98354",
      "url": "https://patchblox.com/security/cve/CVE-2026-98354",
      "title": "RDMA/mad: Fix receive buffer leak when PKey enforcement fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98358",
      "url": "https://patchblox.com/security/cve/CVE-2026-98358",
      "title": "IB/iser: reject a remote invalidation of an unregistered direction",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45865",
      "url": "https://patchblox.com/security/cve/CVE-2026-45865",
      "title": "kernel-64kb: mctp i2c: initialise event handler read bytes (bsc#1266694).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45930",
      "url": "https://patchblox.com/security/cve/CVE-2026-45930",
      "title": "net: mctp: ensure our nlmsg responses are initialised",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46034",
      "url": "https://patchblox.com/security/cve/CVE-2026-46034",
      "title": "kernel-64kb: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43299",
      "url": "https://patchblox.com/security/cve/CVE-2026-43299",
      "title": "btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43132",
      "url": "https://patchblox.com/security/cve/CVE-2026-43132",
      "title": "kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64012",
      "url": "https://patchblox.com/security/cve/CVE-2026-64012",
      "title": "kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43457",
      "url": "https://patchblox.com/security/cve/CVE-2026-43457",
      "title": "kernel-64kb: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53108",
      "url": "https://patchblox.com/security/cve/CVE-2026-53108",
      "title": "powerpc/64s: Fix unmap race with PMD migration entries",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}