KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-31435 | 8.8 | Apr 22 | netfs: Fix read abandonment during retry Affected: 6.12 before 6.18.21; 6.19 before 6.19.11; 7.0; 7.0; 7.0; 7.0; +2 more |
| CVE-2026-31433 | 8.8 | Apr 22 | ksmbd: fix potencial OOB in get_file_all_info() for compound requests Affected: 5.15.145 before 5.15.203; 6.1.71 before 6.1.168; 6.6 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +5 more |
| CVE-2026-31432 | 8.8 | Apr 22 | ksmbd: fix OOB write in QUERY_INFO for compound requests Affected: 5.15.145 before 5.16; 6.1.71 before 6.2; 6.6 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31409 | 8.8 | Apr 6 | ksmbd: unset conn->binding on failed binding request Affected: 5.15 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; 7.0; +3 more |
| CVE-2026-31408 | 8.8 | Apr 6 | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Affected: 2.6.12.1 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +10 more |
| CVE-2026-23462 | 8.8 | Apr 3 | Bluetooth: HIDP: Fix possible UAF Affected: 3.10 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; +5 more |
| CVE-2026-23461 | 8.8 | Apr 3 | Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Affected: 6.6.84 before 6.6.130; 6.12.20 before 6.12.78; 6.13.8 before 6.14; 6.14.1 before 6.18.20; 6.19 before 6.19.10; 6.14; +9 more |
| CVE-2026-23395 | 8.8 | Mar 25 | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Affected: 5.7.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; +9 more |
| CVE-2026-23246 | 8.8 | Mar 18 | wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration Affected: 6.5.1 before 6.6.130; 6.7 before 6.12.77; 6.13 before 6.18.17; 6.19 before 6.19.7; 6.5; 7.0 |
| CVE-2021-47670 | 8.8 | Apr 17 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe Affected: 4.0 before 4.19.171; 4.20 before 5.4.93; 5.5 before 5.10.11; 5.11; 5.11; 5.11; +1 more |
| CVE-2021-47668 | 8.8 | Apr 17 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe Affected: 2.6.31 before 4.4.254; 4.5 before 4.9.254; 4.10 before 4.14.218; 4.15 before 4.19.171; 4.20 before 5.4.93; 5.5 before 5.10.11; +4 more |
| CVE-2025-22041 | 8.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in… Affected: before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.13; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2025-22040 | 8.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup… Affected: 5.15 before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.23; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2022-49535 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_issue_els_flogi()… Affected: before 5.15.181; 5.16 before 5.18.3 |
| CVE-2022-49479 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing… Affected: 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49470 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event We should not access skb buffer data anymore… Affected: 5.2 before 5.15.54; 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49416 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211_vif_use_reserved_context(), when we have an… Affected: 3.17 before 4.9.318; 4.10 before 4.14.283; 4.15 before 4.19.247; 4.20 before 5.4.198; 5.5 before 5.10.121; 5.11 before 5.15.46; +2 more |
| CVE-2022-49328 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about… Affected: before 5.15.58; 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49238 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 Commit b4a0f54156ac ("ath11k: move… Affected: 5.17 before 5.17.2 |
| CVE-2022-49114 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix use after free in fc_exch_abts_resp() fc_exch_release(ep) will decrease the ep's reference… Affected: before 4.9.311; 4.10 before 4.14.276; 4.15 before 4.19.238; 4.20 before 5.4.189; 5.5 before 5.10.111; 5.11 before 5.15.34; +2 more |
| CVE-2022-49111 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hci_send_acl This fixes the following trace caused by receiving… Affected: before 4.9.311; 4.10 before 4.14.276; 4.15 before 4.19.238; 4.20 before 5.4.189; 5.5 before 5.10.111; 5.11 before 5.15.34; +2 more |
| CVE-2024-47659 | 8.8 | Oct 9 | In the Linux kernel, the following vulnerability has been resolved: smack: tcp: ipv4, fix incorrect labeling Currently, Smack mirrors the label of incoming tcp/ipv4 connections:… Affected: before 4.19.322; 4.20 before 5.4.284; 5.5 before 5.10.226; 5.11 before 5.15.167; 5.16 before 6.1.109; 6.2 before 6.6.50; +1 more |
| CVE-2024-43847 | 8.8 | Aug 17 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid memory access while processing fragmented packets The monitor ring and the reo… Affected: 6.3 before 6.6.44; 6.7 before 6.10.3 |
| CVE-2021-4440 | 8.8 | Jun 25 | In the Linux kernel, the following vulnerability has been resolved: x86/xen: Drop USERGS_SYSRET64 paravirt call commit afd30525a659ac0ae0904f0cb4a2ca75522c3123 upstream Affected: 5.10.215 before 5.10.218 |
| CVE-2024-36013 | 8.8 | May 23 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from… Affected: 3.0 before 6.6.32; 6.7 before 6.8.11; 6.9; 6.9; 6.9; 6.9; +3 more |
| CVE-2023-52801 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix missing update of domains_itree after splitting iopt_area In iopt_area_split(), if the original… Affected: 6.2 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2023-52798 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix dfs radar event locking The ath11k active pdevs are protected by RCU but the DFS radar… Affected: 5.6 before 5.10.202; 5.11 before 5.15.140; 5.16 before 6.1.64; 6.2 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2023-52776 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix dfs-radar and temperature event locking The ath12k active pdevs are protected by RCU but… Affected: 6.3 before 6.5.13; 6.6 before 6.6.3 |
| CVE-2021-47324 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix possible use-after-free in wdt_startup() This module's remove path calls del_timer() Affected: before 4.4.276; 4.5 before 4.9.276; 4.10 before 4.14.240; 4.15 before 4.19.198; 4.20 before 5.4.134; 5.5 before 5.10.52; +2 more |
| CVE-2021-47323 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff() This module's remove path calls del_timer() Affected: before 4.4.276; 4.5 before 4.9.276; 4.10 before 4.14.240; 4.15 before 4.19.198; 4.20 before 5.4.134; 5.5 before 5.10.52; +2 more |
| CVE-2021-47308 | 8.8 | May 21 | In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in… Affected: before 4.14.241; 4.15 before 4.19.199; 4.20 before 5.4.135; 5.5 before 5.10.53; 5.11 before 5.13.5 |
| CVE-2024-35969 | 8.8 | May 20 | ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr Affected: 2.6.35 before 4.19.313; 4.20 before 5.4.275; 5.5 before 5.10.216; 5.11 before 5.15.156; 5.16 before 6.1.87; 6.2 before 6.6.28; +4 more |
| CVE-2024-35955 | 8.8 | May 20 | kprobes: Fix possible use-after-free issue on kprobe registration Affected: 4.14.291 before 4.15; 4.19.256 before 4.19.313; 5.4.211 before 5.4.275; 5.10.137 before 5.10.216; 5.15.61 before 5.15.157; 5.18.18 before 5.19; +6 more |
| CVE-2024-35843 | 8.8 | May 17 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Use device rbtree in iopf reporting path The existing I/O page fault handler currently locates… Affected: before 6.8.2 |
| CVE-2024-35814 | 8.8 | May 17 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: Fix double-allocation of slots due to broken alignment handling Commit bbb73a103fbb ("swiotlb: fix a… Affected: 6.3 before 6.6.24; 6.7 before 6.7.12; 6.8 before 6.8.3 |
| CVE-2024-27053 | 8.8 | May 1 | wifi: wilc1000: fix RCU usage in connect path Affected: 5.1 before 5.4.273; 5.5 before 5.10.214; 5.11 before 5.15.153; 5.16 before 6.1.83; 6.2 before 6.6.23; 6.7 before 6.7.11; +1 more |
| CVE-2024-26779 | 8.8 | Apr 3 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix race condition on enabling fast-xmit fast-xmit must only be enabled after the sta has… Affected: before 4.19.308; 4.20 before 5.4.270; 5.5 before 5.10.211; 5.11 before 5.15.150; 5.16 before 6.1.80; 6.2 before 6.6.19; +2 more |
| CVE-2024-20040 | 8.8 | Apr 1 | In wlan firmware, there is a possible out of bounds write due to improper input validation Affected: 4.19 |
| CVE-2023-52502 | 8.8 | Mar 2 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() Sili Luo reported a race in… Affected: 3.6 before 4.19.297; 4.20 before 5.4.259; 5.5 before 5.10.199; 5.11 before 5.15.136; 5.16 before 6.1.59; 6.2 before 6.5.8; +5 more |
| CVE-2023-52479 | 8.8 | Feb 29 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix uaf in smb20_oplock_break_ack drop reference after use opinfo Affected: before 5.15.135; 5.16 before 6.1.57; 6.2 before 6.5.7; 6.6; 6.6; 6.6; +1 more |
| CVE-2024-25744 | 8.8 | Feb 12 | In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point Affected: before 6.6.7 |
| CVE-2023-5178 | 8.8 | Nov 1 | Kernel: use after free in nvmet_tcp_free_crypto in nvme Affected: 5.0 before 5.4.260; 5.5 before 5.10.199; 5.11 before 5.15.137; 5.16 before 6.1.60; 6.2 before 6.5.9 |
| CVE-2023-44466 | 8.8 | Sep 29 | An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5 Affected: 5.11 before 5.15.121; 5.16 before 6.1.40; 6.2 before 6.4.5 |
| CVE-2023-2163 | 8.8 | Sep 20 | Incorrect verifier pruning in BPF in Linux Kernel >=5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral… Affected: 5.3 before 5.4.242; 5.5 before 5.10.179; 5.11 before 5.15.109; 5.16 before 6.1.26; 6.2 before 6.2.13 |
| CVE-2022-2196 | 8.8 | Jan 9 | A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't… Affected: 5.4.47 before 5.4.233; 5.6.19 before 5.7; 5.7.3 before 5.10.170; 5.11 before 5.15.96; 5.16 before 6.1.14 |
| CVE-2022-47942 | 8.8 | Dec 23 | An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2 Affected: 5.15 before 5.15.62; 5.16 before 5.18.18; 5.19 before 5.19.2 |
| CVE-2022-42896 | 8.8 | Nov 23 | Info Leak in l2cap_core in the Linux Kernel Affected: 3.0.0 through 711f8c3fb3db61897080468586b970c87c61d9e4 |
| CVE-2022-3640 | 8.8 | Oct 21 | Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use after free Affected: 4.9.326 before 4.9.333; 4.14.291 before 4.14.299; 4.19.255 before 4.19.265; 5.4.209 before 5.4.224; 5.10.135 before 5.10.154; 5.15.59 before 5.15.79; +1 more |
| CVE-2022-42719 | 8.8 | Oct 13 | A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN… Affected: 5.2 before 5.4.219; 5.5 before 5.10.149; 5.11 before 5.15.74; 5.16 before 5.19.16; 6.0 before 6.0.2 |
| CVE-2022-1043 | 8.8 | Aug 29 | A flaw was found in the Linux kernel’s io_uring implementation Affected: 5.10.51 before 5.10.61; 5.11 before 5.13.13 |
The 500 most important CVEs for this product (exploited first, then by severity)