KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,203
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53266 In wildKEV | 8.8 | Jun 25 | netfilter: bridge: make ebt_snat ARP rewrite writable Affected: 5.4.73 before 5.5; 5.8.17 before 5.9; 5.9.2 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; +9 more |
| CVE-2013-6282 In wildKEV | 8.8 | Nov 19 | Linux Kernel Improper Input Validation Vulnerability Affected: before 3.2.54; 3.3 before 3.4.12; 3.5 before 3.5.5 |
| CVE-2022-0185 In wildKEV | 8.4 | Feb 11 | Linux Kernel Heap-Based Buffer Overflow Vulnerability Affected: 8.4 |
| CVE-2013-2094 In wildKEV | 8.4 | May 14 | Linux Kernel Privilege Escalation Vulnerability Affected: before 3.0.75; 3.1 before 3.2.45; 3.3 before 3.4.42; 3.5 before 3.8.9 |
| CVE-2026-53362 In wildKEV | 7.8 | Jul 4 | ipv6: account for fraggap on the paged allocation path Affected: 6.0 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 4.14 before 5.10.254; 5.11 before 5.15.204; 5.16 before 6.1.170; 6.2 before 6.6.137; 6.7 before 6.12.85; 6.13 before 6.18.22; +7 more |
| CVE-2025-38352 In wildKEV | 7.8 | Jul 22 | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() Affected: 2.6.36 before 5.4.295; 5.5 before 5.10.239; 5.11 before 5.15.186; 5.16 before 6.1.142; 6.2 before 6.6.94; 6.7 before 6.12.34; +2 more |
| CVE-2024-53197 In wildKEV | 7.8 | Dec 27 | ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices Affected: 2.6.12 before 4.19.325; 4.20 before 5.4.287; 5.5 before 5.10.231; 5.11 before 5.15.174; 5.16 before 6.1.120; 6.2 before 6.6.64; +2 more |
| CVE-2024-53104 In wildKEV | 7.8 | Dec 2 | media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Affected: 2.6.26 before 4.19.324; 4.20 before 5.4.286; 5.5 before 5.10.230; 5.11 before 5.15.172; 5.16 before 6.1.117; 6.2 before 6.6.61; +2 more |
| CVE-2024-36971 In wildKEV | 7.8 | Jun 10 | net: fix __dst_negative_advice() race Affected: 4.6 before 4.19.316; 4.20 before 5.4.278; 5.5 before 5.10.219; 5.11 before 5.15.161; 5.16 before 6.1.94; 6.2 before 6.6.34; +1 more |
| CVE-2024-1086 RansomwareIn wildKEV | 7.8 | Jan 31 | Use-after-free in Linux kernel's netfilter: nf_tables component Affected: 3.15 before 6.8 |
| CVE-2022-2586 In wildKEV | 7.8 | Jan 8 | Linux Kernel Use-After-Free Vulnerability Affected: 3.16 before 4.14.316; 4.15 before 4.19.256; 4.20 before 5.4.211; 5.5 before 5.10.137; 5.11 before 5.15.61; 5.16 before 5.18.18; +1 more |
| CVE-2023-0386 In wildKEV | 7.8 | Mar 22 | Linux Kernel Improper Ownership Management Vulnerability Affected: Linux kernel 6.2-rc6 |
| CVE-2022-0995 In wildKEV | 7.8 | Mar 25 | Linux Kernel Out-of-Bounds Write Vulnerability Affected: kernel 5.17 rc8 |
| CVE-2022-0847 In wildKEV | 7.8 | Mar 7 | Linux Kernel Privilege Escalation Vulnerability Affected: Linux Kernel 5.17 rc6 |
| CVE-2022-0492 In wildKEV | 7.8 | Mar 3 | Linux Kernel Improper Authentication Vulnerability Affected: kernel 5.17 rc3 |
| CVE-2021-22555 In wildKEV | 7.8 | Jul 7 | Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE Affected: 2.6.19-rc1 before unspecified |
| CVE-2021-3493 In wildKEV | 7.8 | Apr 17 | Linux Kernel Privilege Escalation Vulnerability Affected: All versions, or not specified |
| CVE-2019-13272 In wildKEV | 7.8 | Jul 17 | Linux Kernel Improper Privilege Management Vulnerability Affected: 3.16.52 before 3.16.71; 4.1.39 before 4.2; 4.4.40 before 4.4.185; 4.8.16 before 4.9; 4.9.1 before 4.9.185; 4.10 before 4.14.133; +2 more |
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 2.6.x, 3.10.x, 4.14.x |
| CVE-2017-1000253 RansomwareIn wildKEV | 7.8 | Oct 4 | Linux Kernel PIE Stack Buffer Corruption Vulnerability Affected: 2.6.25 before 3.2.70; 3.3 before 3.4.109; 3.5 before 3.10.77; 3.11 before 3.12.43; 3.13 before 3.14.41; 3.15 before 3.16.35; +3 more |
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: before 3.2.60; 3.3 before 3.4.92; 3.5 before 3.10.42; 3.11 before 3.12.22; 3.13 before 3.14.6 |
| CVE-2013-2596 In wildKEV | 7.8 | Apr 13 | Linux Kernel Integer Overflow Vulnerability Affected: 2.6.12 before 3.0.75; 3.1 before 3.2.45; 3.3 before 3.4.42; 3.5 before 3.8.9 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: before 2.6.36 |
| CVE-2024-53150 In wildKEV | 7.1 | Dec 24 | ALSA: usb-audio: Fix out of bounds reads when finding clock sources Affected: before 5.4.287; 5.5 before 5.10.231; 5.11 before 5.15.174; 5.16 before 6.1.120; 6.2 before 6.6.64; 6.7 before 6.11.11; +1 more |
| CVE-2023-0266 In wildKEV | 7.0 | Jan 30 | Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel Affected: 4.14 before 56b88b50565cd8b946a2d00b0c83927b7ebb055e |
| CVE-2021-22600 In wildKEV | 7.0 | Jan 26 | Double Free in net/packet/af_packet.c leading to priviledge escalation Affected: before 5.4.168; before 5.10.88; before 5.15.11; before 5.16-rc6 |
| CVE-2016-5195 In wildKEV | 7.0 | Nov 10 | Linux Kernel Race Condition Vulnerability Affected: 2.6.22 before 3.2.83; 3.3 before 3.4.113; 3.5 before 3.10.104; 3.11 before 3.12.66; 3.13 before 3.16.38; 3.17 before 3.18.44; +4 more |
| CVE-2026-98115 | 8.8 | Sep 25 | ksmbd: safely drain sessions during logoff Affected: 6.6.48 before 6.7; 6.10.7 before 6.11; 6.11.1 before 7.2.7; 6.11; 6.11; 6.11; +2 more |
| CVE-2026-64445 | 8.8 | Jul 25 | staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Affected: 4.12 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +3 more |
| CVE-2026-64441 | 8.8 | Jul 25 | staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Affected: 4.12 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; 6.19 before 7.1.4; +2 more |
| CVE-2026-64438 | 8.8 | Jul 25 | crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Affected: 4.3 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; +1 more |
| CVE-2026-64437 | 8.8 | Jul 25 | ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Affected: 6.1.176 before 6.1.178; 6.6.143 before 6.6.145; 6.12.94 before 6.12.96; 6.18.36 before 6.18.39; 7.0.13 before 7.1; 7.1.1 before 7.1.4; +2 more |
| CVE-2026-64434 | 8.8 | Jul 25 | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Affected: 5.10.259 before 5.10.265; 5.15.210 before 5.15.216; 6.1.176 before 6.1.183; 6.6.143 before 6.6.145; 6.12.93 before 6.12.97; 6.18.35 before 6.18.39; +5 more |
| CVE-2026-64408 | 8.8 | Jul 25 | Bluetooth: bnep: pin L2CAP connection during netdev registration Affected: 3.13 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +3 more |
| CVE-2026-64396 | 8.8 | Jul 25 | ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64394 | 8.8 | Jul 25 | ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64390 | 8.8 | Jul 25 | ksmbd: track the connection owning a byte-range lock Affected: 5.15 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; 6.19 before 7.1.4 |
| CVE-2026-64382 | 8.8 | Jul 25 | smb: client: fix double-free in SMB2_open() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64366 | 8.8 | Jul 25 | HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert Affected: 6.15 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64364 | 8.8 | Jul 25 | HID: multitouch: fix out-of-bounds bit access on mt_io_flags Affected: 5.10.246 before 5.10.261; 5.15.196 before 5.15.212; 6.1.158 before 6.1.178; 6.6.114 before 6.6.145; 6.12.55 before 6.12.97; 6.17.5 before 6.18; +11 more |
| CVE-2026-64313 | 8.8 | Jul 25 | crypto: ecc - Fix carry overflow in vli multiplication Affected: 4.8 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64280 | 8.8 | Jul 25 | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Affected: 4.19 before 6.6.148; 6.7 before 6.12.101; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64255 | 8.8 | Jul 24 | wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Affected: 6.4 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-64206 | 8.8 | Jul 20 | Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Affected: 3.15.5 before 3.16; 3.16.1 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; +10 more |
| CVE-2026-64178 | 8.8 | Jul 19 | Bluetooth: bnep: Fix UAF read of dev->name Affected: 2.6.12.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +10 more |
| CVE-2026-64153 | 8.8 | Jul 19 | drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64138 | 8.8 | Jul 19 | ksmbd: validate SID in parent security descriptor during ACL inheritance Affected: 5.15 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64124 | 8.8 | Jul 19 | net: devmem: reject dma-buf bind with non-page-aligned size or SG length Affected: 6.16 before 6.18.35; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64117 | 8.8 | Jul 19 | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Affected: 6.4 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)