KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,208
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-52934 | 8.8 | Jun 24 | batman-adv: tvlv: reject oversized TVLV packets Affected: 3.13 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.34; +5 more |
| CVE-2026-52918 | 8.8 | Jun 24 | Bluetooth: serialize accept_q access Affected: 2.6.12.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +10 more |
| CVE-2026-52911 | 8.8 | Jun 21 | ksmbd: scope conn->binding slowpath to bound sessions only Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-46317 | 8.8 | Jun 9 | KVM: arm64: Reassign nested_mmus array behind mmu_lock Affected: 6.11 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-46264 | 8.8 | Jun 3 | drm/xe/pf: Fix sysfs initialization Affected: 6.19 before 6.19.4 |
| CVE-2026-46238 | 8.8 | May 28 | batman-adv: stop caching unowned originator pointers in BAT IV Affected: 2.6.38 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46212 | 8.8 | May 28 | batman-adv: bla: prevent use-after-free when deleting claims Affected: 3.5 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46198 | 8.8 | May 28 | batman-adv: fix integer overflow on buff_pos Affected: 2.6.38 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46174 | 8.8 | May 28 | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Affected: 3.16.58 before 3.17; 4.4.144 before 4.5; 4.9.102 before 4.10; 4.14.1 before 5.10.256; 5.11 before 5.15.207; 5.16 before 6.1.173; +15 more |
| CVE-2026-46166 | 8.8 | May 28 | wifi: mac80211: use safe list iteration in radar detect work Affected: 6.12 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46152 | 8.8 | May 28 | wifi: mac80211: drop stray 'static' from fast-RX rx_result Affected: 6.4 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46125 | 8.8 | May 28 | wifi: mac80211: remove station if connection prep fails Affected: 6.0 before 6.1.176; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-46113 | 8.8 | May 28 | KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Affected: 2.6.20 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-46056 | 8.8 | May 27 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Affected: 3.7 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; 6.19 before 7.0.4 |
| CVE-2026-45945 | 8.8 | May 27 | iommu/vt-d: Fix race condition during PASID entry replacement Affected: 6.13 before 6.19.4 |
| CVE-2026-43503 | 8.8 | May 23 | net: skbuff: propagate shared-frag marker through frag-transfer helpers Affected: 3.9 before 5.10.257; 5.11 before 5.15.208; 5.16 before 6.1.174; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +5 more |
| CVE-2026-43495 | 8.8 | May 21 | net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler Affected: 5.19 before 6.1.176; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-43490 | 8.8 | May 15 | ksmbd: validate inherited ACE SID length Affected: 5.15 before 6.6.141; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-43403 | 8.8 | May 8 | nsfs: tighten permission checks for ns iteration ioctls Affected: 6.12 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43391 | 8.8 | May 8 | nsfs: tighten permission checks for handle opening Affected: 6.18 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43334 | 8.8 | May 8 | Bluetooth: SMP: force responder MITM requirements before building the pairing response Affected: 3.3 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +7 more |
| CVE-2026-43322 | 8.8 | May 8 | Bluetooth: hci_sync: Fix UAF in le_read_features_complete Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +2 more |
| CVE-2026-43284 | 8.8 | May 8 | xfrm: esp: avoid in-place decrypt on shared skb frags Affected: 4.11 before 5.10.255; 5.12 before 5.15.205; 5.16 before 6.1.171; 6.2 before 6.6.138; 6.7 before 6.12.87; 6.13 before 6.18.28; +1 more |
| CVE-2026-43283 | 8.8 | May 6 | net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle Affected: 3.15.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +4 more |
| CVE-2026-43249 | 8.8 | May 6 | 9p/xen: protect xen_9pfs_front_free against concurrent calls Affected: 4.14.308 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43239 | 8.8 | May 6 | smb: client: prevent races in ->query_interfaces() Affected: 5.19.1 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6; 5.19; 5.19; +4 more |
| CVE-2026-43232 | 8.8 | May 6 | net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets Affected: 4.9.337 before 4.10; 4.14.303 before 4.15; 4.19.270 before 4.20; 5.4.229 before 5.5; 5.10.163 before 5.10.252; 5.15.86 before 5.15.202; +7 more |
| CVE-2026-43215 | 8.8 | May 6 | cifs: Fix locking usage for tcon fields Affected: 6.0 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43187 | 8.8 | May 6 | xfs: delete attr leaf freemap entries when empty Affected: 2.6.12.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +6 more |
| CVE-2026-43176 | 8.8 | May 6 | wifi: rtw89: pci: validate release report content before using for RTL8922DE Affected: 6.18 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43172 | 8.8 | May 6 | wifi: iwlwifi: fix 22000 series SMEM parsing Affected: 5.8 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43158 | 8.8 | May 6 | xfs: fix freemap adjustments when adding xattrs to leaf blocks Affected: 2.6.12.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +6 more |
| CVE-2026-43113 | 8.8 | May 6 | wifi: wl1251: validate packet IDs before indexing tx_frames Affected: 2.6.31 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +4 more |
| CVE-2026-43112 | 8.8 | May 6 | fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Affected: 5.16.1 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 5.16; 5.16; +8 more |
| CVE-2026-43110 | 8.8 | May 6 | wifi: brcmfmac: validate bsscfg indices in IF events Affected: 3.9 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +5 more |
| CVE-2026-43048 | 8.8 | May 1 | HID: core: Mitigate potential OOB by removing bogus memset() Affected: 2.6.15.1 before 6.18.22; 6.19 before 6.19.12; 2.6.15; 2.6.15; 2.6.15; 7.0; +3 more |
| CVE-2026-43018 | 8.8 | May 1 | Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Affected: 5.17 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31773 | 8.8 | May 1 | Bluetooth: SMP: derive legacy responder STK authentication from MITM state Affected: 3.15.5 before 3.16; 3.16.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; +9 more |
| CVE-2026-31739 | 8.8 | May 1 | crypto: tegra - Add missing CRYPTO_ALG_ASYNC Affected: 6.10 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31735 | 8.8 | May 1 | iommupt: Fix short gather if the unmap goes into a large mapping Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more |
| CVE-2026-31717 | 8.8 | May 1 | ksmbd: validate owner of durable handle on reconnect Affected: 6.6.32 before 6.7; 6.9 before 6.18.25; 6.19 before 7.0.2; 7.1 |
| CVE-2026-31709 | 8.8 | May 1 | smb: client: validate the whole DACL before rewriting it in cifsacl Affected: 5.12 before 7.0.2 |
| CVE-2026-31706 | 8.8 | May 1 | ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() Affected: 5.15 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2 |
| CVE-2026-31629 | 8.8 | Apr 24 | nfc: llcp: add missing return after LLCP_CLOSED checks Affected: 3.3 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31622 | 8.8 | Apr 24 | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Affected: 3.13 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31588 | 8.8 | Apr 24 | KVM: x86: Use scratch field in MMIO fragment to hold small write values Affected: 3.5 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31570 | 8.8 | Apr 24 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() Affected: 5.4.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; +9 more |
| CVE-2026-31558 | 8.8 | Apr 24 | LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Affected: 6.10.1 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; 6.10; 7.0; 7.0; +5 more |
| CVE-2026-31553 | 8.8 | Apr 24 | KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Affected: 6.19.1 before 6.19.11; 6.19; 7.0; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31450 | 8.8 | Apr 22 | ext4: publish jinode after initialization Affected: 3.11.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.21; +9 more |
The 500 most important CVEs for this product (exploited first, then by severity)