KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,208
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43011 | 9.8 | May 1 | net/x25: Fix potential double free of skb Affected: 2.6.12.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +12 more |
| CVE-2026-31718 | 9.8 | May 1 | ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Affected: 6.6.32 before 6.7; 6.9 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2; 7.1 |
| CVE-2026-31705 | 9.8 | May 1 | ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment Affected: 5.15.145 before 5.16; 6.1.71 before 6.2; 6.6 before 6.6.136; 6.7 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2 |
| CVE-2026-31669 | 9.8 | Apr 24 | mptcp: fix slab-use-after-free in __inet_lookup_established Affected: 5.12.1 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; +8 more |
| CVE-2026-31668 | 9.8 | Apr 24 | seg6: separate dst_cache for input and output paths in seg6 lwtunnel Affected: 4.10.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31659 | 9.8 | Apr 24 | batman-adv: reject oversized global TT response buffers Affected: 3.13.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31657 | 9.8 | Apr 24 | batman-adv: hold claim backbone gateways by reference Affected: 3.5.1 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; 3.5; +7 more |
| CVE-2026-31649 | 9.8 | Apr 24 | net: stmmac: fix integer underflow in chain mode Affected: 3.2.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.169; 6.2 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; +9 more |
| CVE-2026-31637 | 9.8 | Apr 24 | rxrpc: reject undecryptable rxkad response tickets Affected: 2.6.22.1 before 6.6.135; 6.7 before 6.12.82; 6.13 before 6.18.23; 6.19 before 6.19.13; 2.6.22; 7.0; +6 more |
| CVE-2026-31633 | 9.8 | Apr 24 | rxrpc: Fix integer overflow in rxgk_verify_response() Affected: 6.16.1 before 6.18.23; 6.19 before 6.19.13; 6.16; 7.0; 7.0; 7.0; +4 more |
| CVE-2026-31609 | 9.8 | Apr 24 | smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() Affected: before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31608 | 9.8 | Apr 24 | smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() Affected: before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31607 | 9.8 | Apr 24 | usbip: validate number_of_packets in usbip_pack_ret_submit() Affected: 2.6.39 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31589 | 9.8 | Apr 24 | mm: call ->free_folio() directly in folio_unmap_invalidate() Affected: 6.14 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31536 | 9.8 | Apr 24 | smb: server: let send_done handle a completion without IB_SEND_SIGNALED Affected: 5.15 before 6.18.11; 6.19 before 6.19.1 |
| CVE-2026-31533 | 9.8 | Apr 23 | net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption Affected: 5.15.160 before 5.15.203; 6.1.84 before 6.1.169; 6.6.18 before 6.6.135; 6.7.6 before 6.8; 6.8.1 before 6.12.82; 6.13 before 6.18.23; +8 more |
| CVE-2026-31501 | 9.8 | Apr 22 | net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Affected: 6.15.1 before 6.19.11; 6.15; 7.0; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31478 | 9.8 | Apr 22 | ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Affected: 5.15.145 before 5.15.203; 6.1.71 before 6.1.168; 6.6.1 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +8 more |
| CVE-2026-31463 | 9.8 | Apr 22 | iomap: fix invalid folio access when i_blkbits differs from I/O granularity Affected: 6.19 before 6.19.11; 7.0; 7.0; 7.0; 7.0; 7.0 |
| CVE-2026-31444 | 9.8 | Apr 22 | ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Affected: 6.12.78 before 6.12.80; 6.18.19 before 6.18.21; 6.19.9 before 6.19.11; 6.6.130; 7.0; 7.0 |
| CVE-2026-31436 | 9.8 | Apr 22 | dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Affected: 6.8 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31414 | 9.8 | Apr 13 | netfilter: nf_conntrack_expect: use expect->helper Affected: 2.6.30 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31405 | 9.8 | Apr 6 | media: dvb-net: fix OOB access in ULE extension header tables Affected: 2.6.12.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.19; +8 more |
| CVE-2026-31402 | 9.8 | Apr 3 | nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Affected: 2.6.12.1 before 5.10.253; 5.11 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; +9 more |
| CVE-2026-23450 | 9.8 | Apr 3 | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Affected: 5.15.174 before 5.15.203; 5.18 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; +5 more |
| CVE-2026-23240 | 9.8 | Mar 10 | tls: Fix race condition in tls_sw_cancel_work_tx() Affected: 5.3.1 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6; 5.3; 5.3; 5.3; +4 more |
| CVE-2026-23112 | 9.8 | Feb 13 | nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Affected: 5.0 before 5.10.250; 5.11 before 5.15.200; 5.16 before 6.1.163; 6.2 before 6.6.124; 6.7 before 6.12.70; 6.13 before 6.18.10; +8 more |
| CVE-2025-22088 | 9.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called,… Affected: 6.0 before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.23; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2025-21796 | 9.8 | Feb 27 | nfsd: clear acl_access/acl_default after releasing them Affected: 2.6.13 before 5.10.235; 5.11 before 5.15.179; 5.16 before 6.1.129; 6.2 before 6.6.79; 6.7 before 6.12.16; 6.13 before 6.13.4; +2 more |
| CVE-2022-49362 | 9.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix potential use-after-free in nfsd_file_put() nfsd_file_put_noref() can free @nf, so don't… Affected: 5.18 before 5.18.4; 5.19 |
| CVE-2022-49093 | 9.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for page_pool fragment recycling Fix a use-after-free when using page_pool with page… Affected: 5.15 before 5.15.34; 5.16 before 5.16.20; 5.17 before 5.17.3; 5.18 |
| CVE-2024-53177 | 9.8 | Dec 27 | smb: prevent use-after-free due to open_cached_dir error paths Affected: before 6.6.64; 6.7 before 6.11.11; 6.12 before 6.12.2 |
| CVE-2024-53095 | 9.8 | Nov 21 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace Affected: 4.2 before 6.6.62; 6.7 before 6.11.9; 6.12; 6.12; 6.12; 6.12; +2 more |
| CVE-2024-42256 | 9.8 | Aug 8 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server re-repick on subrequest retry When a subrequest is marked for needing retry, netfs will call… Affected: 6.10 before 6.10.1 |
| CVE-2024-39462 | 9.8 | Jun 25 | In the Linux kernel, the following vulnerability has been resolved: clk: bcm: dvp: Assign ->num before accessing ->hws Commit f316cdff8d67 ("clk: Annotate struct… Affected: 6.6 before 6.6.34; 6.7 before 6.9.5 |
| CVE-2024-36031 | 9.8 | May 30 | In the Linux kernel, the following vulnerability has been resolved: keys: Fix overwrite of key expiration on instantiation The expiry time of a key is unconditionally… Affected: 5.10.206 before 5.10.217; 5.15.146 before 5.15.159; 6.1.70 before 6.1.91; 6.6.9 before 6.6.31; 6.7 before 6.8.10; 6.9 before 6.9.1 |
| CVE-2021-47548 | 9.8 | May 24 | In the Linux kernel, the following vulnerability has been resolved: ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() The if… Affected: before 4.9.292; 4.10 before 4.14.257; 4.15 before 4.19.220; 4.20 before 5.4.164; 5.5 before 5.10.84; 5.11 before 5.15.7; +1 more |
| CVE-2023-52755 | 9.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smb_inherit_dacl() slab out-of-bounds write is caused by that offsets… Affected: 5.15 before 5.15.140; 5.16 before 6.1.64; 6.2 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2021-47378 | 9.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: destroy cm id before destroy qp to avoid use after free We should always destroy cm_id before… Affected: before 5.10.70; 5.11 before 5.14.9; 5.15 |
| CVE-2021-47232 | 9.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: fix Use-after-Free, hold skb ref while in use This patch fixes a Use-after-Free found by the… Affected: 5.4 before 5.4.128; 5.5 before 5.10.46; 5.11 before 5.12.13; 5.13; 5.13; 5.13; +3 more |
| CVE-2024-35870 | 9.8 | May 19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() The UAF bug is due to smb2_reconnect_server() accessing a… Affected: before 6.1.121; 6.2 before 6.6.29; 6.7 before 6.8.5; 6.9; 6.9 |
| CVE-2024-35869 | 9.8 | May 19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from parent session Avoid potential use-after-free bugs when… Affected: 6.2.8 before 6.3; 6.4 before 6.6.29; 6.7 before 6.8.5; 6.9; 6.9 |
| CVE-2024-35865 | 9.8 | May 19 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_oplock_break() Skip sessions that are being teared down… Affected: before 6.1.85; 6.2 before 6.6.26; 6.7 before 6.8.5; 6.9; 6.9 |
| CVE-2022-48697 | 9.8 | May 3 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix a use-after-free Fix the following use-after-free complaint triggered by blktests nvme/004: BUG:… Affected: 4.8 before 4.19.260; 4.20 before 5.4.213; 5.5 before 5.10.143; 5.11 before 5.15.68; 5.16 before 5.19.9; 6.0; +3 more |
| CVE-2022-48666 | 9.8 | Apr 28 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix a use-after-free There are two .exit_cmd_priv implementations Affected: 5.7 before 5.19.12; 6.0; 6.0; 6.0; 6.0 |
| CVE-2021-47137 | 9.8 | Mar 25 | In the Linux kernel, the following vulnerability has been resolved: net: lantiq: fix memory corruption in RX ring In a situation where memory allocation or dma mapping fails, an… Affected: 4.20 before 5.4.124; 5.5 before 5.10.42; 5.11 before 5.12.9; 5.13; 5.13; 5.13 |
| CVE-2023-38429 | 9.8 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.4 Affected: 5.15 before 5.15.113; 5.16 before 6.1.30; 6.2 before 6.3.4 |
| CVE-2023-38427 | 9.8 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.8 Affected: 5.15 before 5.15.145; 5.16 before 6.1.34; 6.2 before 6.3.8 |
| CVE-2022-47939 | 9.8 | Dec 23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2 Affected: 5.15 before 5.15.61; 5.16 before 5.18.18; 5.19 before 5.19.2 |
| CVE-2021-3773 | 9.8 | Feb 16 | A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks Affected: before 5.14; 5.15 before 5.15.15 |
The 500 most important CVEs for this product (exploited first, then by severity)