KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-53215 | 9.8 | Jun 25 | net: mvpp2: refill RX buffers before XDP or skb use Affected: 5.7.15 before 5.8; 5.8.2 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53176 | 9.8 | Jun 25 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN Affected: 3.10 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53175 | 9.8 | Jun 25 | inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush Affected: 6.18.3 before 6.18.36; 6.19.1 before 7.0.13; 6.12.93; 6.19; 6.19; 6.19; +12 more |
| CVE-2026-53151 | 9.8 | Jun 25 | rxrpc: Fix the ACK parser to extract the SACK table for parsing Affected: 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; +5 more |
| CVE-2026-53088 | 9.8 | Jun 24 | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Affected: 3.16.50 before 3.17; 4.13.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; +9 more |
| CVE-2026-53086 | 9.8 | Jun 24 | net: bcmgenet: fix racing timeout handler Affected: 4.2 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53055 | 9.8 | Jun 24 | crypto: hisilicon/sec2 - prevent req used-after-free for sec Affected: 6.17 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53049 | 9.8 | Jun 24 | gfs2: add some missing log locking Affected: 5.7 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53046 | 9.8 | Jun 24 | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53045 | 9.8 | Jun 24 | memory: tegra124-emc: Fix dll_change check Affected: 4.2 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53010 | 9.8 | Jun 24 | ksmbd: fix use-after-free in smb2_open during durable reconnect Affected: 6.6.32 before 6.7; 6.9 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53006 | 9.8 | Jun 24 | ipv6: fix possible UAF in icmpv6_rcv() Affected: 4.4 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53002 | 9.8 | Jun 24 | netfilter: conntrack: remove sprintf usage Affected: 2.6.20 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-52993 | 9.8 | Jun 24 | tipc: fix double-free in tipc_buf_append() Affected: 4.15 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-52989 | 9.8 | Jun 24 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Affected: 5.10.250 before 5.11; 5.15.200 before 5.16; 6.1.163 before 6.1.175; 6.6.124 before 6.6.141; 6.12.70 before 6.12.91; 6.18.10 before 6.18.33; +3 more |
| CVE-2026-52986 | 9.8 | Jun 24 | netfilter: nf_conntrack_sip: don't use simple_strtoul Affected: 2.6.26 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +2 more |
| CVE-2026-52982 | 9.8 | Jun 24 | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Affected: 2.6.12.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +7 more |
| CVE-2026-52955 | 9.8 | Jun 24 | libceph: Fix potential out-of-bounds access in crush_decode() Affected: 2.6.34.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +11 more |
| CVE-2026-52931 | 9.8 | Jun 24 | batman-adv: tp_meter: avoid use of uninit sender vars Affected: 4.8 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-52924 | 9.8 | Jun 24 | sctp: purge outqueue on stale COOKIE-ECHO handling Affected: 4.15 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +7 more |
| CVE-2026-52914 | 9.8 | Jun 24 | batman-adv: fix fragment reassembly length accounting Affected: 3.13 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-46325 | 9.8 | Jun 9 | RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Affected: 6.2.3 before 6.18.14; 6.19 before 6.19.4 |
| CVE-2026-46289 | 9.8 | Jun 8 | lib/scatterlist: fix length calculations in extract_kvec_to_sg Affected: 6.3 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7 |
| CVE-2026-46195 | 9.8 | May 28 | smb: client: validate dacloffset before building DACL pointers Affected: 5.12 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46137 | 9.8 | May 28 | mptcp: pm: ADD_ADDR rtx: fix potential data-race Affected: 5.10 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.30; +3 more |
| CVE-2026-46135 | 9.8 | May 28 | nvmet-tcp: fix race between ICReq handling and queue teardown Affected: 5.0 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1 |
| CVE-2026-46115 | 9.8 | May 28 | block: add pgmap check to biovec_phys_mergeable Affected: 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7 |
| CVE-2026-46039 | 9.8 | May 27 | rxgk: Fix potential integer overflow in length check Affected: 6.16.9 before 6.17; 6.17.1 before 6.18.27; 6.19 before 7.0.4; 6.17; 6.17 |
| CVE-2026-45988 | 9.8 | May 27 | rxrpc: Fix re-decryption of RESPONSE packets Affected: 2.6.22 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; 6.19 before 7.0.4 |
| CVE-2026-45972 | 9.8 | May 27 | smb: client: fix potential UAF and double free in smb2_open_file() Affected: 6.1.163 before 6.1.165; 6.6.124 before 6.6.128; 6.12.70 before 6.12.75; 6.18.10 before 6.18.14; 6.19.1 before 6.19.4; 6.19 |
| CVE-2026-45898 | 9.8 | May 27 | RDMA/iwcm: Fix workqueue list corruption by removing work_list Affected: 6.11 before 6.12.75; 6.13 before 6.18.14; 6.19 before 6.19.4 |
| CVE-2026-43501 | 9.8 | May 21 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Affected: 5.7 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; +2 more |
| CVE-2026-43493 | 9.8 | May 19 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests Affected: 2.6.34 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; +1 more |
| CVE-2026-43465 | 9.8 | May 8 | net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Affected: 6.6.115 before 6.7; 6.12.56 before 6.13; 6.17.6 before 6.18; 6.18.1 before 6.18.19; 6.19 before 6.19.9; 6.18; +8 more |
| CVE-2026-43414 | 9.8 | May 8 | scsi: qla2xxx: Completely fix fcport double free Affected: 5.15.154 before 5.16; 6.1.84 before 6.2; 6.6.24 before 6.7; 6.7.12 before 6.8; 6.8.3 before 6.9; 6.9.1 before 6.19.9; +10 more |
| CVE-2026-43402 | 9.8 | May 8 | kthread: consolidate kthread exit paths to prevent use-after-free Affected: 6.14 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43384 | 9.8 | May 8 | net/tcp-ao: Fix MAC comparison to be constant-time Affected: 6.7 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43379 | 9.8 | May 8 | ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Affected: 6.6.32 before 6.6.130; 6.9 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; 7.0; 7.0; +1 more |
| CVE-2026-43376 | 9.8 | May 8 | ksmbd: fix use-after-free by using call_rcu() for oplock_info Affected: 6.6.88 before 6.6.130; 6.12.25 before 6.12.78; 6.14.4 before 6.15; 6.15.1 before 6.18.19; 6.19 before 6.19.9; 6.15; +8 more |
| CVE-2026-43341 | 9.8 | May 8 | net/ipv6: ioam6: prevent schema length wraparound in trace fill Affected: 5.15 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +6 more |
| CVE-2026-43304 | 9.8 | May 8 | libceph: define and enforce CEPH_MAX_KEY_LEN Affected: 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43208 | 9.8 | May 6 | net: do not pass flow_id to set_rps_cpu() Affected: 6.18 before 6.18.16; 6.19 before 6.19.6; 7.0 |
| CVE-2026-43198 | 9.8 | May 6 | tcp: fix potential race in tcp_v6_syn_recv_sock() Affected: 2.6.12.1 before 6.18.16; 6.19 before 6.19.6; 2.6.12; 2.6.12; 2.6.12; 2.6.12; +2 more |
| CVE-2026-43186 | 9.8 | May 6 | ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() Affected: 5.15 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43185 | 9.8 | May 6 | ksmbd: fix signededness bug in smb_direct_prepare_negotiation() Affected: 5.15 before 6.18.16; 6.19 before 6.19.6; 7.0 |
| CVE-2026-43125 | 9.8 | May 6 | dlm: validate length in dlm_search_rsb_tree Affected: 3.4 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43067 | 9.8 | May 5 | ext4: handle wraparound when searching for blocks for indirect mapped blocks Affected: 5.15.203 before 5.16; 6.6.130 before 6.6.134; 6.12.77 before 6.12.80; 6.18.14 before 6.18.21; 6.19.4 before 6.19.11; 6.1.167 |
| CVE-2026-43039 | 9.8 | May 1 | net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more |
| CVE-2026-43038 | 9.8 | May 1 | ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() Affected: after 3.13 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +14 more |
| CVE-2026-43037 | 9.8 | May 1 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Affected: 2.6.22 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +7 more |
The 500 most important CVEs for this product (exploited first, then by severity)
