KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-39682 In wildKEV | 9.8 | Sep 5 | tls: fix handling of zero-length records on the rx_list Affected: 6.0 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.44; 6.13 before 6.16.4; 6.17; 6.17 |
| CVE-2026-53266 In wildKEV | 8.8 | Jun 25 | netfilter: bridge: make ebt_snat ARP rewrite writable Affected: 5.4.73 before 5.5; 5.8.17 before 5.9; 5.9.2 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; +9 more |
| CVE-2013-6282 In wildKEV | 8.8 | Nov 19 | Linux Kernel Improper Input Validation Vulnerability Affected: before 3.2.54; 3.3 before 3.4.12; 3.5 before 3.5.5 |
| CVE-2022-0185 In wildKEV | 8.4 | Feb 11 | Linux Kernel Heap-Based Buffer Overflow Vulnerability Affected: 8.4 |
| CVE-2013-2094 In wildKEV | 8.4 | May 14 | Linux Kernel Privilege Escalation Vulnerability Affected: before 3.0.75; 3.1 before 3.2.45; 3.3 before 3.4.42; 3.5 before 3.8.9 |
| CVE-2026-53362 In wildKEV | 7.8 | Jul 4 | ipv6: account for fraggap on the paged allocation path Affected: 6.0 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 4.14 before 5.10.254; 5.11 before 5.15.204; 5.16 before 6.1.170; 6.2 before 6.6.137; 6.7 before 6.12.85; 6.13 before 6.18.22; +7 more |
| CVE-2025-38352 In wildKEV | 7.8 | Jul 22 | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Affected: 2.6.36 before 5.4.295; 5.5 before 5.10.239; 5.11 before 5.15.186; 5.16 before 6.1.142; 6.2 before 6.6.94; 6.7 before 6.12.34; +2 more |
| CVE-2024-53197 In wildKEV | 7.8 | Dec 27 | ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices Affected: 2.6.12 before 4.19.325; 4.20 before 5.4.287; 5.5 before 5.10.231; 5.11 before 5.15.174; 5.16 before 6.1.120; 6.2 before 6.6.64; +2 more |
| CVE-2024-53104 In wildKEV | 7.8 | Dec 2 | media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Affected: 2.6.26 before 4.19.324; 4.20 before 5.4.286; 5.5 before 5.10.230; 5.11 before 5.15.172; 5.16 before 6.1.117; 6.2 before 6.6.61; +2 more |
| CVE-2024-36971 In wildKEV | 7.8 | Jun 10 | net: fix __dst_negative_advice() race Affected: 4.6 before 4.19.316; 4.20 before 5.4.278; 5.5 before 5.10.219; 5.11 before 5.15.161; 5.16 before 6.1.94; 6.2 before 6.6.34; +1 more |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: 3.15 before 6.8 |
| CVE-2022-2586 In wildKEV | 7.8 | Jan 8 | Linux Kernel Use-After-Free Vulnerability Affected: 3.16 before 4.14.316; 4.15 before 4.19.256; 4.20 before 5.4.211; 5.5 before 5.10.137; 5.11 before 5.15.61; 5.16 before 5.18.18; +1 more |
| CVE-2023-0386 In wildKEV | 7.8 | Mar 22 | Linux Kernel Improper Ownership Management Vulnerability Affected: Linux kernel 6.2-rc6 |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: kernel 5.17 rc8 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: Linux Kernel 5.17 rc6 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: kernel 5.17 rc3 |
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: 2.6.19-rc1 before unspecified |
| CVE-2021-3493 In wildKEV | 7.8 | Apr 17 | Linux Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 3.16.52 before 3.16.71; 4.1.39 before 4.2; 4.4.40 before 4.4.185; 4.8.16 before 4.9; 4.9.1 before 4.9.185; 4.10 before 4.14.133; +2 more |
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 2.6.x, 3.10.x, 4.14.x |
| CVE-2017-1000253 RansomwareIn wildKEV | 7.8 | Oct 4 | Linux Kernel PIE Stack Buffer Corruption Vulnerability Affected: 2.6.25 before 3.2.70; 3.3 before 3.4.109; 3.5 before 3.10.77; 3.11 before 3.12.43; 3.13 before 3.14.41; 3.15 before 3.16.35; +3 more |
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: before 3.2.60; 3.3 before 3.4.92; 3.5 before 3.10.42; 3.11 before 3.12.22; 3.13 before 3.14.6 |
| CVE-2013-2596 In wildKEV | 7.8 | Apr 13 | Linux Kernel Integer Overflow Vulnerability Affected: 2.6.12 before 3.0.75; 3.1 before 3.2.45; 3.3 before 3.4.42; 3.5 before 3.8.9 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: before 2.6.36 |
| CVE-2024-53150 In wildKEV | 7.1 | Dec 24 | ALSA: usb-audio: Fix out of bounds reads when finding clock sources Affected: before 5.4.287; 5.5 before 5.10.231; 5.11 before 5.15.174; 5.16 before 6.1.120; 6.2 before 6.6.64; 6.7 before 6.11.11; +1 more |
| CVE-2023-0266 In wildKEV | 7.0 | Jan 30 | Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel Affected: 4.14 before 56b88b50565cd8b946a2d00b0c83927b7ebb055e |
| CVE-2021-22600 In wildKEV | 7.0 | Jan 26 | Double Free in net/packet/af_packet.c leading to priviledge escalation Affected: before 5.4.168; before 5.10.88; before 5.15.11; before 5.16-rc6 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 2.6.22 before 3.2.83; 3.3 before 3.4.113; 3.5 before 3.10.104; 3.11 before 3.12.66; 3.13 before 3.16.38; 3.17 before 3.18.44; +4 more |
| CVE-2021-0920 In wildKEV | 6.4 | Dec 15 | Android Kernel Race Condition Vulnerability Affected: through 5.13; 5.14; 5.14; 5.14 |
| CVE-2025-39964 In wildKEV | 5.5 | Oct 13 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Affected: 2.6.38 before 5.10.245; 5.11 before 5.15.194; 5.16 before 6.1.154; 6.2 before 6.6.108; 6.7 before 6.12.49; 6.13 before 6.16.9; +6 more |
| CVE-2024-50302 In wildKEV | 5.5 | Nov 19 | HID: core: zero-initialize the report buffer Affected: 3.12 before 4.19.324; 4.20 before 5.4.286; 5.5 before 5.10.230; 5.11 before 5.15.172; 5.16 before 6.1.117; 6.2 before 6.6.61; +7 more |
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: after 2.6.31 before 3.2.59; 3.3 before 3.4.91; 3.5 before 3.10.40; 3.11 before 3.12.20; 3.13 before 3.14.4; 2.6.31; +7 more |
| CVE-2026-63795 | 10.0 | Jul 19 | 9p: avoid putting oldfid in p9_client_walk() error path Affected: 6.0 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2015-8104 | 10.0 | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB… Affected: through 4.2.3 |
| CVE-2026-100075 | 9.8 | Sep 25 | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters Affected: 4.7 before 5.10.270; 5.11 before 5.15.221; 5.16 before 6.1.188; 6.2 before 6.6.157; 6.7 before 6.12.110; 6.13 before 6.18.52; +1 more |
| CVE-2026-64439 | 9.8 | Jul 25 | crypto: krb5 - filter out async aead implementations at alloc Affected: 6.15 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64410 | 9.8 | Jul 25 | netfilter: flowtable: IPIP tunnel hardware offload is not yet support Affected: 6.19 before 7.1.4; 7.2; 7.2 |
| CVE-2026-64399 | 9.8 | Jul 25 | ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64397 | 9.8 | Jul 25 | ksmbd: serialize QUERY_DIRECTORY requests per file Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64391 | 9.8 | Jul 25 | ksmbd: use opener credentials for ADS I/O Affected: 5.15 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64387 | 9.8 | Jul 25 | smb: client: fix query directory replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64386 | 9.8 | Jul 25 | smb: client: fix query_info() replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64385 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_ioctl() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64384 | 9.8 | Jul 25 | smb: client: fix change notify replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64383 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_flush() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64355 | 9.8 | Jul 25 | bpf: Reject fragmented frames in devmap Affected: 5.14 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64303 | 9.8 | Jul 25 | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Affected: 5.2 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64268 | 9.8 | Jul 25 | RDMA/siw: bound Read Response placement to the RREAD length Affected: 5.3 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64232 | 9.8 | Jul 24 | block: recompute nr_integrity_segments in blk_insert_cloned_request Affected: 6.12 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)