KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-64115 | 8.8 | Jul 19 | vsock/vmci: fix UAF when peer resets connection during handshake Affected: 3.9 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64109 | 8.8 | Jul 19 | af_unix: Fix UAF read of tail->len in unix_stream_data_wait() Affected: 4.2 before 6.6.143; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64096 | 8.8 | Jul 19 | batman-adv: mcast: fix use-after-free in orig_node RCU release Affected: 3.15 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64093 | 8.8 | Jul 19 | batman-adv: tp_meter: directly shut down timer on cleanup Affected: 4.8 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64088 | 8.8 | Jul 19 | batman-adv: tt: fix negative tt_buff_len Affected: 3.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64042 | 8.8 | Jul 19 | vfio/pci: Check BAR resources before exporting a DMABUF Affected: 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
| CVE-2026-64030 | 8.8 | Jul 19 | wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Affected: 6.15 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64010 | 8.8 | Jul 19 | nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() Affected: 3.6 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63975 | 8.8 | Jul 19 | Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp Affected: 5.7 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63947 | 8.8 | Jul 19 | Bluetooth: HIDP: fix missing length checks in hidp_input_report() Affected: 2.6.12.1 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; +10 more |
| CVE-2026-63944 | 8.8 | Jul 19 | Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync Affected: 6.4 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; +3 more |
| CVE-2026-63941 | 8.8 | Jul 19 | KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor Affected: 6.11 before 6.18.57; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-63937 | 8.8 | Jul 19 | KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Affected: 6.11 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-63923 | 8.8 | Jul 19 | octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify Affected: 6.13 before 6.18.42; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-63921 | 8.8 | Jul 19 | ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). Affected: 3.15 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63919 | 8.8 | Jul 19 | xfrm: input: hold netns during deferred transport reinjection Affected: 5.6 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63885 | 8.8 | Jul 19 | drm/gem: fix race between change_handle and handle_delete Affected: 6.18.32 before 6.18.35; 7.0.9 before 7.0.12; 7.1; 7.1; 7.1 |
| CVE-2026-63866 | 8.8 | Jul 19 | wifi: mt76: mt7996: Clear wcid pointer in mt7996_mac_sta_deinit_link() Affected: 6.15 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-63865 | 8.8 | Jul 19 | bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks Affected: 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-63863 | 8.8 | Jul 19 | drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() Affected: 7.0 before 7.0.10 |
| CVE-2026-63832 | 8.8 | Jul 19 | wifi: mt76: add wcid publish check in mt76_sta_add Affected: 6.12.13 before 6.12.114; 6.13.2 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-63831 | 8.8 | Jul 19 | mac802154: llsec: add skb_cow_data() before in-place crypto Affected: 3.16 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63829 | 8.8 | Jul 19 | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Affected: 3.16 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63807 | 8.8 | Jul 19 | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Affected: 5.12 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-63801 | 8.8 | Jul 19 | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Affected: 5.5 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63796 | 8.8 | Jul 19 | ocfs2: reject oversized group bitmap descriptors Affected: 2.6.16 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-53375 | 8.8 | Jul 19 | drm/amdgpu/vce: Prevent partial address patches Affected: 4.2 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; 6.19 before 7.0.9 |
| CVE-2026-53374 | 8.8 | Jul 19 | drm/amdgpu: zero-initialize GART table on allocation Affected: 4.2 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; 6.19 before 7.0.9; 7.1; +1 more |
| CVE-2026-53360 | 8.8 | Jul 4 | KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use Affected: 6.10 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53359 | 8.8 | Jul 4 | KVM: x86: Fix shadow paging use-after-free due to unexpected role Affected: 2.6.36 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-53358 | 8.8 | Jul 2 | Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() Affected: 3.4 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-53354 | 8.8 | Jul 1 | arm64: errata: Mitigate TLBI errata on various Arm CPUs Affected: 3.7 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +2 more |
| CVE-2026-53322 | 8.8 | Jun 26 | vfio/pci: Clean up DMABUFs before disabling function Affected: 6.19 before 7.0.10 |
| CVE-2026-53281 | 8.8 | Jun 26 | iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Affected: 6.12.57 before 6.13; 6.13.3 before 6.18.33; 6.19 before 7.0.10; 7.1; 7.1; 7.1 |
| CVE-2026-53277 | 8.8 | Jun 25 | KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation Affected: 6.12 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53275 | 8.8 | Jun 25 | ipv6: mcast: Fix use-after-free when processing MLD queries Affected: 2.6.15 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; +6 more |
| CVE-2026-53248 | 8.8 | Jun 25 | net: airoha: Fix use-after-free in metadata dst teardown Affected: 6.15 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53240 | 8.8 | Jun 25 | xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload Affected: 6.14 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53232 | 8.8 | Jun 25 | net: phy: clean the sfp upstream if phy probing fails Affected: 5.5 before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53200 | 8.8 | Jun 25 | KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53198 | 8.8 | Jun 25 | ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Affected: 5.15 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; +5 more |
| CVE-2026-53188 | 8.8 | Jun 25 | RDMA/core: Validate the passed in fops for ib_get_ucaps() Affected: 6.15 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53171 | 8.8 | Jun 25 | accel/ethosu: fix arithmetic issues in dma_length() Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53170 | 8.8 | Jun 25 | accel/ethosu: reject DMA commands with uninitialized length Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53075 | 8.8 | Jun 24 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls Affected: 2.6.30 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53072 | 8.8 | Jun 24 | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER Affected: 3.17 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53071 | 8.8 | Jun 24 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp Affected: 5.7 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53057 | 8.8 | Jun 24 | iommu/riscv: Add IOTINVAL after updating DDT/PDT entries Affected: 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53053 | 8.8 | Jun 24 | iommu/amd: Fix clone_alias() to use the original device's devid Affected: 5.4.17 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-52952 | 8.8 | Jun 24 | iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset Affected: 7.0 before 7.0.10; 7.1; 7.1; 7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)