KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,203
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63922 | 9.8 | Jul 19 | ipv6: exthdrs: refresh nh after handling HAO option Affected: 2.6.19 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63888 | 9.8 | Jul 19 | scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() Affected: 3.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63887 | 9.8 | Jul 19 | scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf Affected: 3.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63886 | 9.8 | Jul 19 | scsi: target: iscsi: Validate CHAP_R length before base64 decode Affected: 6.0 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; +4 more |
| CVE-2026-63808 | 9.8 | Jul 19 | exfat: fix potential use-after-free in exfat_find_dir_entry() Affected: 5.7 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63800 | 9.8 | Jul 19 | pNFS: Fix use-after-free in pnfs_update_layout() Affected: 5.4.91 before 5.5; 5.10.9 before 5.10.260; 5.11.1 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; +7 more |
| CVE-2026-53399 | 9.8 | Jul 19 | nfsd: release layout stid on setlease failure Affected: 4.0 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-53398 | 9.8 | Jul 19 | NFSD: Fix SECINFO_NO_NAME decode error cleanup Affected: 5.10.220 before 5.10.260; 5.15.154 before 5.15.211; 6.1 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-53384 | 9.8 | Jul 19 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Affected: 5.19 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.0.14; 7.1 before 7.1.2 |
| CVE-2026-53363 | 9.8 | Jul 10 | xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags() Affected: 6.14 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53355 | 9.8 | Jul 1 | net: rds: clear i_sends on setup unwind Affected: 3.18.74 before 3.19; 4.1.46 before 4.2; 4.4.91 before 4.5; 4.9.54 before 4.10; 4.11.1 before 5.10.259; 5.11 before 5.15.210; +18 more |
| CVE-2026-53309 | 9.8 | Jun 26 | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Affected: 2.6.37 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53260 | 9.8 | Jun 25 | tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). Affected: 6.12 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53247 | 9.8 | Jun 25 | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown Affected: 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; +4 more |
| CVE-2026-53246 | 9.8 | Jun 25 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing Affected: 2.6.12.1 before 6.18.36; 6.19 before 7.0.13; 2.6.12; 2.6.12; 2.6.12; 2.6.12; +7 more |
| CVE-2026-53228 | 9.8 | Jun 25 | ipv6: sit: reload inner IPv6 header after GSO offloads Affected: 3.18 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53221 | 9.8 | Jun 25 | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() Affected: 3.19 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53216 | 9.8 | Jun 25 | net: mvpp2: limit XDP frame size to the RX buffer Affected: 5.9 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; +7 more |
| CVE-2026-53215 | 9.8 | Jun 25 | net: mvpp2: refill RX buffers before XDP or skb use Affected: 5.7.15 before 5.8; 5.8.2 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53176 | 9.8 | Jun 25 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN Affected: 3.10 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53175 | 9.8 | Jun 25 | inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush Affected: 6.18.3 before 6.18.36; 6.19.1 before 7.0.13; 6.12.93; 6.19; 6.19; 6.19; +12 more |
| CVE-2026-53151 | 9.8 | Jun 25 | rxrpc: Fix the ACK parser to extract the SACK table for parsing Affected: 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; +5 more |
| CVE-2026-53088 | 9.8 | Jun 24 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Affected: 3.16.50 before 3.17; 4.13.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; +9 more |
| CVE-2026-53086 | 9.8 | Jun 24 | net: bcmgenet: fix racing timeout handler Affected: 4.2 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53055 | 9.8 | Jun 24 | crypto: hisilicon/sec2 - prevent req used-after-free for sec Affected: 6.17 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53049 | 9.8 | Jun 24 | gfs2: add some missing log locking Affected: 5.7 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53046 | 9.8 | Jun 24 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53045 | 9.8 | Jun 24 | memory: tegra124-emc: Fix dll_change check Affected: 4.2 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53010 | 9.8 | Jun 24 | ksmbd: fix use-after-free in smb2_open during durable reconnect Affected: 6.6.32 before 6.7; 6.9 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53006 | 9.8 | Jun 24 | ipv6: fix possible UAF in icmpv6_rcv() Affected: 4.4 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53002 | 9.8 | Jun 24 | netfilter: conntrack: remove sprintf usage Affected: 2.6.20 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-52993 | 9.8 | Jun 24 | tipc: fix double-free in tipc_buf_append() Affected: 4.15 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-52989 | 9.8 | Jun 24 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Affected: 5.10.250 before 5.11; 5.15.200 before 5.16; 6.1.163 before 6.1.175; 6.6.124 before 6.6.141; 6.12.70 before 6.12.91; 6.18.10 before 6.18.33; +3 more |
| CVE-2026-52986 | 9.8 | Jun 24 | netfilter: nf_conntrack_sip: don't use simple_strtoul Affected: 2.6.26 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +2 more |
| CVE-2026-52982 | 9.8 | Jun 24 | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Affected: 2.6.12.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +7 more |
| CVE-2026-52955 | 9.8 | Jun 24 | libceph: Fix potential out-of-bounds access in crush_decode() Affected: 2.6.34.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +11 more |
| CVE-2026-52931 | 9.8 | Jun 24 | batman-adv: tp_meter: avoid use of uninit sender vars Affected: 4.8 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-52924 | 9.8 | Jun 24 | sctp: purge outqueue on stale COOKIE-ECHO handling Affected: 4.15 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +7 more |
| CVE-2026-52914 | 9.8 | Jun 24 | batman-adv: fix fragment reassembly length accounting Affected: 3.13 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-46325 | 9.8 | Jun 9 | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Affected: 6.2.3 before 6.18.14; 6.19 before 6.19.4 |
| CVE-2026-46289 | 9.8 | Jun 8 | lib/scatterlist: fix length calculations in extract_kvec_to_sg Affected: 6.3 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7 |
| CVE-2026-46195 | 9.8 | May 28 | smb: client: validate dacloffset before building DACL pointers Affected: 5.12 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46137 | 9.8 | May 28 | mptcp: pm: ADD_ADDR rtx: fix potential data-race Affected: 5.10 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.30; +3 more |
| CVE-2026-46135 | 9.8 | May 28 | nvmet-tcp: fix race between ICReq handling and queue teardown Affected: 5.0 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1 |
| CVE-2026-46115 | 9.8 | May 28 | block: add pgmap check to biovec_phys_mergeable Affected: 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7 |
| CVE-2026-46039 | 9.8 | May 27 | rxgk: Fix potential integer overflow in length check Affected: 6.16.9 before 6.17; 6.17.1 before 6.18.27; 6.19 before 7.0.4; 6.17; 6.17 |
| CVE-2026-45988 | 9.8 | May 27 | rxrpc: Fix re-decryption of RESPONSE packets Affected: 2.6.22 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; 6.19 before 7.0.4 |
| CVE-2026-45972 | 9.8 | May 27 | smb: client: fix potential UAF and double free in smb2_open_file() Affected: 6.1.163 before 6.1.165; 6.6.124 before 6.6.128; 6.12.70 before 6.12.75; 6.18.10 before 6.18.14; 6.19.1 before 6.19.4; 6.19 |
| CVE-2026-45898 | 9.8 | May 27 | RDMA/iwcm: Fix workqueue list corruption by removing work_list Affected: 6.11 before 6.12.75; 6.13 before 6.18.14; 6.19 before 6.19.4 |
| CVE-2026-43501 | 9.8 | May 21 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Affected: 5.7 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; +2 more |
The 500 most important CVEs for this product (exploited first, then by severity)
