KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,210
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-39682 In wildKEV | 9.8 | Sep 5 | tls: fix handling of zero-length records on the rx_list Affected: 6.0 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.44; 6.13 before 6.16.4; 6.17; 6.17 |
| CVE-2026-63795 | 10.0 | Jul 19 | 9p: avoid putting oldfid in p9_client_walk() error path Affected: 6.0 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2015-8104 | 10.0 | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB… Affected: through 4.2.3 |
| CVE-2026-100075 | 9.8 | Sep 25 | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters Affected: 4.7 before 5.10.270; 5.11 before 5.15.221; 5.16 before 6.1.188; 6.2 before 6.6.157; 6.7 before 6.12.110; 6.13 before 6.18.52; +1 more |
| CVE-2026-64439 | 9.8 | Jul 25 | crypto: krb5 - filter out async aead implementations at alloc Affected: 6.15 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64410 | 9.8 | Jul 25 | netfilter: flowtable: IPIP tunnel hardware offload is not yet support Affected: 6.19 before 7.1.4; 7.2; 7.2 |
| CVE-2026-64399 | 9.8 | Jul 25 | ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64397 | 9.8 | Jul 25 | ksmbd: serialize QUERY_DIRECTORY requests per file Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64391 | 9.8 | Jul 25 | ksmbd: use opener credentials for ADS I/O Affected: 5.15 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64387 | 9.8 | Jul 25 | smb: client: fix query directory replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64386 | 9.8 | Jul 25 | smb: client: fix query_info() replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64385 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_ioctl() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64384 | 9.8 | Jul 25 | smb: client: fix change notify replay double-free Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64383 | 9.8 | Jul 25 | smb: client: fix double-free in SMB2_flush() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64355 | 9.8 | Jul 25 | bpf: Reject fragmented frames in devmap Affected: 5.14 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64303 | 9.8 | Jul 25 | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Affected: 5.2 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64268 | 9.8 | Jul 25 | RDMA/siw: bound Read Response placement to the RREAD length Affected: 5.3 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64232 | 9.8 | Jul 24 | block: recompute nr_integrity_segments in blk_insert_cloned_request Affected: 6.12 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
| CVE-2026-64216 | 9.8 | Jul 24 | netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() Affected: 6.12 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64162 | 9.8 | Jul 19 | idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
| CVE-2026-64160 | 9.8 | Jul 19 | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Affected: 5.18 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64150 | 9.8 | Jul 19 | netfilter: nft_inner: release local_lock before re-enabling softirqs Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64142 | 9.8 | Jul 19 | ksmbd: close durable scavenger races against m_fp_list lookups Affected: 6.11 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1 |
| CVE-2026-64136 | 9.8 | Jul 19 | smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Affected: 6.6.128 before 6.6.142; 6.12.75 before 6.12.92; 6.18.16 before 6.18.34; 6.19.6 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64132 | 9.8 | Jul 19 | ipv6: ioam: refresh hdr pointer before ioam6_event() Affected: 6.9 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64125 | 9.8 | Jul 19 | net: bcmgenet: keep RBUF EEE/PM disabled Affected: 3.19 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64122 | 9.8 | Jul 19 | net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Affected: 6.18.14 before 6.18.34; 6.19.4 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64113 | 9.8 | Jul 19 | ixgbevf: fix use-after-free in VEPA multicast source pruning Affected: 3.19 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64102 | 9.8 | Jul 19 | RDMA/siw: Reject MPA FPDU length underflow before signed receive math Affected: 5.3 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64091 | 9.8 | Jul 19 | batman-adv: tt: fix TOCTOU race for reported vlans Affected: 3.16.60 before 3.17; 4.4.217 before 4.5; 4.9.217 before 4.10; 4.14.174 before 4.15; 4.17.1 before 5.10.259; 5.11 before 5.15.210; +11 more |
| CVE-2026-64089 | 9.8 | Jul 19 | batman-adv: tt: fix negative last_changeset_len Affected: 3.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64069 | 9.8 | Jul 19 | netfs: Fix cancellation of a DIO and single read subrequests Affected: 6.14 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64068 | 9.8 | Jul 19 | netfs: Fix missing locking around retry adding new subreqs Affected: 6.10 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64067 | 9.8 | Jul 19 | netfs: Fix missing barriers when accessing stream->subrequests locklessly Affected: 6.10 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64066 | 9.8 | Jul 19 | netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Affected: 6.12 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64061 | 9.8 | Jul 19 | netfs: Fix early put of sink folio in netfs_read_gaps() Affected: 6.12 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64056 | 9.8 | Jul 19 | net: ethernet: cortina: Make RX SKB per-port Affected: 4.16 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +4 more |
| CVE-2026-64055 | 9.8 | Jul 19 | net: ethernet: cortina: Carry over frag counter Affected: 4.16 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +4 more |
| CVE-2026-64047 | 9.8 | Jul 19 | net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Affected: 5.4.14 before 5.5; 5.5.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; +7 more |
| CVE-2026-64046 | 9.8 | Jul 19 | net: tls: prevent chain-after-chain in plain text SG Affected: 5.4.14 before 5.5; 5.5.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; +7 more |
| CVE-2026-64037 | 9.8 | Jul 19 | wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Affected: 6.15 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64035 | 9.8 | Jul 19 | igc: set tx buffer type for SMD frames Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64033 | 9.8 | Jul 19 | RDMA/rtrs: Fix use-after-free in path file creation cleanup Affected: 5.15.61 before 5.15.209; 5.17 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64025 | 9.8 | Jul 19 | bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Affected: 5.10 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64016 | 9.8 | Jul 19 | ksmbd: fix durable reconnect error path file lifetime Affected: 6.18.33; 7.0.10; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64007 | 9.8 | Jul 19 | netfilter: synproxy: refresh tcphdr after skb_ensure_writable Affected: 3.12 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-64000 | 9.8 | Jul 19 | net: hsr: fix potential OOB access in supervision frame handling Affected: 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; +4 more |
| CVE-2026-63994 | 9.8 | Jul 19 | tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Affected: 5.9 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63993 | 9.8 | Jul 19 | vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() Affected: 5.9 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63924 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() Affected: 2.6.12.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +11 more |
The 500 most important CVEs for this product (exploited first, then by severity)