KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,203
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64216 | 9.8 | Jul 24 | netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() Affected: 6.12 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64162 | 9.8 | Jul 19 | idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
| CVE-2026-64160 | 9.8 | Jul 19 | netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Affected: 5.18 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64150 | 9.8 | Jul 19 | netfilter: nft_inner: release local_lock before re-enabling softirqs Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64142 | 9.8 | Jul 19 | ksmbd: close durable scavenger races against m_fp_list lookups Affected: 6.11 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1 |
| CVE-2026-64136 | 9.8 | Jul 19 | smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Affected: 6.6.128 before 6.6.142; 6.12.75 before 6.12.92; 6.18.16 before 6.18.34; 6.19.6 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64132 | 9.8 | Jul 19 | ipv6: ioam: refresh hdr pointer before ioam6_event() Affected: 6.9 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64125 | 9.8 | Jul 19 | net: bcmgenet: keep RBUF EEE/PM disabled Affected: 3.19 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64122 | 9.8 | Jul 19 | net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Affected: 6.18.14 before 6.18.34; 6.19.4 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64113 | 9.8 | Jul 19 | ixgbevf: fix use-after-free in VEPA multicast source pruning Affected: 3.19 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64102 | 9.8 | Jul 19 | RDMA/siw: Reject MPA FPDU length underflow before signed receive math Affected: 5.3 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64091 | 9.8 | Jul 19 | batman-adv: tt: fix TOCTOU race for reported vlans Affected: 3.16.60 before 3.17; 4.4.217 before 4.5; 4.9.217 before 4.10; 4.14.174 before 4.15; 4.17.1 before 5.10.259; 5.11 before 5.15.210; +11 more |
| CVE-2026-64089 | 9.8 | Jul 19 | batman-adv: tt: fix negative last_changeset_len Affected: 3.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64069 | 9.8 | Jul 19 | netfs: Fix cancellation of a DIO and single read subrequests Affected: 6.14 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64068 | 9.8 | Jul 19 | netfs: Fix missing locking around retry adding new subreqs Affected: 6.10 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64067 | 9.8 | Jul 19 | netfs: Fix missing barriers when accessing stream->subrequests locklessly Affected: 6.10 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64066 | 9.8 | Jul 19 | netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Affected: 6.12 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64061 | 9.8 | Jul 19 | netfs: Fix early put of sink folio in netfs_read_gaps() Affected: 6.12 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64056 | 9.8 | Jul 19 | net: ethernet: cortina: Make RX SKB per-port Affected: 4.16 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +4 more |
| CVE-2026-64055 | 9.8 | Jul 19 | net: ethernet: cortina: Carry over frag counter Affected: 4.16 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +4 more |
| CVE-2026-64047 | 9.8 | Jul 19 | net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Affected: 5.4.14 before 5.5; 5.5.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; +7 more |
| CVE-2026-64046 | 9.8 | Jul 19 | net: tls: prevent chain-after-chain in plain text SG Affected: 5.4.14 before 5.5; 5.5.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; +7 more |
| CVE-2026-64037 | 9.8 | Jul 19 | wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Affected: 6.15 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64035 | 9.8 | Jul 19 | igc: set tx buffer type for SMD frames Affected: 6.16 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64033 | 9.8 | Jul 19 | RDMA/rtrs: Fix use-after-free in path file creation cleanup Affected: 5.15.61 before 5.15.209; 5.17 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64025 | 9.8 | Jul 19 | bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Affected: 5.10 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64016 | 9.8 | Jul 19 | ksmbd: fix durable reconnect error path file lifetime Affected: 6.18.33; 7.0.10; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64007 | 9.8 | Jul 19 | netfilter: synproxy: refresh tcphdr after skb_ensure_writable Affected: 3.12 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-64000 | 9.8 | Jul 19 | net: hsr: fix potential OOB access in supervision frame handling Affected: 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; +4 more |
| CVE-2026-63994 | 9.8 | Jul 19 | tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() Affected: 5.9 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63993 | 9.8 | Jul 19 | vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() Affected: 5.9 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63924 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() Affected: 2.6.12.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +11 more |
| CVE-2026-63922 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh after handling HAO option Affected: 2.6.19 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63888 | 9.8 | Jul 19 | scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Affected: 3.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63887 | 9.8 | Jul 19 | scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf Affected: 3.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63886 | 9.8 | Jul 19 | scsi: target: iscsi: Validate CHAP_R length before base64 decode Affected: 6.0 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; +4 more |
| CVE-2026-63808 | 9.8 | Jul 19 | exfat: fix potential use-after-free in exfat_find_dir_entry() Affected: 5.7 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63800 | 9.8 | Jul 19 | pNFS: Fix use-after-free in pnfs_update_layout() Affected: 5.4.91 before 5.5; 5.10.9 before 5.10.260; 5.11.1 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; +7 more |
| CVE-2026-53399 | 9.8 | Jul 19 | nfsd: release layout stid on setlease failure Affected: 4.0 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-53398 | 9.8 | Jul 19 | NFSD: Fix SECINFO_NO_NAME decode error cleanup Affected: 5.10.220 before 5.10.260; 5.15.154 before 5.15.211; 6.1 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-53384 | 9.8 | Jul 19 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Affected: 5.19 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.0.14; 7.1 before 7.1.2 |
| CVE-2026-53363 | 9.8 | Jul 10 | xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() Affected: 6.14 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53355 | 9.8 | Jul 1 | net: rds: clear i_sends on setup unwind Affected: 3.18.74 before 3.19; 4.1.46 before 4.2; 4.4.91 before 4.5; 4.9.54 before 4.10; 4.11.1 before 5.10.259; 5.11 before 5.15.210; +18 more |
| CVE-2026-53309 | 9.8 | Jun 26 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Affected: 2.6.37 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53260 | 9.8 | Jun 25 | tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). Affected: 6.12 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53247 | 9.8 | Jun 25 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown Affected: 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; +4 more |
| CVE-2026-53246 | 9.8 | Jun 25 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing Affected: 2.6.12.1 before 6.18.36; 6.19 before 7.0.13; 2.6.12; 2.6.12; 2.6.12; 2.6.12; +7 more |
| CVE-2026-53228 | 9.8 | Jun 25 | ipv6: sit: reload inner IPv6 header after GSO offloads Affected: 3.18 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53221 | 9.8 | Jun 25 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Affected: 3.19 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53216 | 9.8 | Jun 25 | net: mvpp2: limit XDP frame size to the RX buffer Affected: 5.9 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; +7 more |
The 500 most important CVEs for this product (exploited first, then by severity)
