KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,204
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8459 | 9.8 | Jan 12 | Possible buffer overflow in storage subsystem Affected: 3.18 |
| CVE-2016-8440 | 9.8 | Jan 12 | Possible buffer overflow in SMMU system call Affected: 3.18 |
| CVE-2016-8439 | 9.8 | Jan 12 | Possible buffer overflow in trust zone access control API Affected: 3.18 |
| CVE-2016-8438 | 9.8 | Jan 12 | Integer overflow leading to a TOCTOU condition in hypervisor PIL Affected: 3.18 |
| CVE-2016-8437 | 9.8 | Jan 12 | Improper input validation in Access Control APIs Affected: 3.18 |
| CVE-2016-8398 | 9.8 | Jan 12 | Unauthenticated messages processed by the UE Affected: 3.18 |
| CVE-2016-9555 | 9.8 | Nov 28 | The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel before 4.8.8 lacks chunk-length checking for the first chunk, which allows remote attackers to cause a… Affected: 3.2 before 3.2.85; 3.3 before 3.10.105; 3.11 before 3.12.68; 3.13 before 3.16.40; 3.17 before 3.18.49; 3.19 before 4.4.32; +1 more |
| CVE-2016-7117 | 9.8 | Oct 10 | Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors… Affected: 2.6.33 before 3.2.80; 3.3 before 3.4.113; 3.5 before 3.10.102; 3.11 before 3.12.59; 3.13 before 3.14.67; 3.15 before 3.16.35; +4 more |
| CVE-2016-5343 | 9.8 | Oct 10 | drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM… Affected: 3.0 through 3.19.8 |
| CVE-2016-5344 | 9.8 | Aug 30 | Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products,… Affected: 3.0 through 3.19.8 |
| CVE-2015-0573 | 9.8 | Aug 7 | drivers/media/platform/msm/broadcast/tsc.c in the TSC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other… Affected: 3.0 through 3.19.8 |
| CVE-2014-9410 | 9.8 | Aug 7 | The vfe31_proc_general function in drivers/media/video/msm/vfe/msm_vfe31.c in the MSM-VFE31 driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android… Affected: 3.0 through 3.19.8 |
| CVE-2016-3955 | 9.8 | Jul 3 | The usbip_recv_xbuff function in drivers/usb/usbip/usbip_common.c in the Linux kernel before 4.5.3 allows remote attackers to cause a denial of service (out-of-bounds write) or… Affected: before 3.2.80; 3.3 before 3.10.102; 3.11 before 3.12.59; 3.13 before 3.14.68; 3.17 before 3.18.37; 3.19 before 4.1.28; +2 more |
| CVE-2015-8812 | 9.8 | Apr 27 | drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause… Affected: before 3.2.78; 3.3 before 3.10.99; 3.11 before 3.12.56; 3.13 before 3.14.63; 3.15 before 3.16.35; 3.17 before 3.18.31; +2 more |
| CVE-2015-8787 | 9.8 | Feb 8 | The nf_nat_redirect_ipv4 function in net/netfilter/nf_nat_redirect.c in the Linux kernel before 4.4 allows remote attackers to cause a denial of service (NULL pointer dereference… Affected: 3.19 before 4.1.31; 4.2 before 4.4 |
| CVE-2011-1180 | 9.8 | Jun 8 | Multiple stack-based buffer overflows in the iriap_getvaluebyclass_indication function in net/irda/iriap.c in the Linux kernel before 2.6.39 allow remote attackers to cause a… Affected: before 2.6.39 |
| CVE-2024-36912 | 9.6 | May 30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for the untrusted host… Affected: 5.16 before 6.1.91; 6.2 before 6.6.31; 6.7 before 6.8.10; 6.9; 6.9; 6.9 |
| CVE-2026-64024 | 9.4 | Jul 19 | tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Affected: 6.10 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-63830 | 9.4 | Jul 19 | net: skmsg: preserve sg.copy across SG transforms Affected: 4.20 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-53131 | 9.4 | Jun 25 | netfilter: require Ethernet MAC header before using eth_hdr() Affected: 2.6.12.1 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; +5 more |
| CVE-2026-43383 | 9.4 | May 8 | net/tcp-md5: Fix MAC comparison to be constant-time Affected: 2.6.20 before 5.10.253; 5.11 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; +2 more |
| CVE-2026-43114 | 9.4 | May 6 | netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Affected: 5.7 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +3 more |
| CVE-2026-31685 | 9.4 | Apr 25 | netfilter: ip6t_eui64: reject invalid MAC header for all packets Affected: 2.6.12.1 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 2.6.12; 2.6.12; +10 more |
| CVE-2026-31448 | 9.4 | Apr 22 | ext4: avoid infinite loops caused by residual data Affected: 2.6.22.1 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; 2.6.22; +9 more |
| CVE-2024-26828 | 9.4 | Apr 17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow in parse_server_interfaces() In this loop, we step through the buffer and after each item… Affected: 4.18 before 6.1.79; 6.2 before 6.6.18; 6.7 before 6.7.6; 6.8; 6.8; 6.8; +1 more |
| CVE-2026-64080 | 9.3 | Jul 19 | firmware: arm_ffa: Snapshot notifier callbacks under lock Affected: 6.15 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64034 | 9.3 | Jul 19 | net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Affected: 5.13 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64018 | 9.3 | Jul 19 | net: mana: validate rx_req_idx to prevent out-of-bounds array access Affected: 5.13 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-63938 | 9.3 | Jul 19 | KVM: SEV: Check PSC request indices against the actual size of the buffer Affected: 6.11 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-46316 | 9.3 | Jun 9 | KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry Affected: 6.10 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +3 more |
| CVE-2024-36913 | 9.3 | May 30 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted… Affected: 5.16 before 6.1.143; 6.2 before 6.6.31; 6.7 before 6.8.10; 6.9; 6.9; 6.9 |
| CVE-2026-64450 | 9.1 | Jul 25 | tipc: fix out-of-bounds read in broadcast Gap ACK blocks Affected: 5.8 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +2 more |
| CVE-2026-64393 | 9.1 | Jul 25 | ksmbd: run set info with opener credentials Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64392 | 9.1 | Jul 25 | ksmbd: use opener credentials for delete-on-close Affected: 5.15 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64320 | 9.1 | Jul 25 | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page Affected: 4.8 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64319 | 9.1 | Jul 25 | nvmet-auth: validate reply message payload bounds against transfer length Affected: 6.0 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64269 | 9.1 | Jul 25 | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Affected: 5.8 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64257 | 9.1 | Jul 25 | smb: client: reject overlapping data areas in SMB2 responses Affected: 5.10.261 before 5.11; 5.15.212 before 5.16; 7.2 |
| CVE-2026-63992 | 9.1 | Jul 19 | tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() Affected: 5.9 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-53225 | 9.1 | Jun 25 | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() Affected: 2.6.25 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53224 | 9.1 | Jun 25 | sctp: validate embedded INIT chunk and address list lengths in cookie Affected: 2.6.12.1 before 6.18.36; 6.19 before 7.0.13; 2.6.12; 2.6.12; 2.6.12; 2.6.12; +8 more |
| CVE-2026-53186 | 9.1 | Jun 25 | RDMA/srp: bound SRP_RSP sense copy by the received length Affected: 2.6.15 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +8 more |
| CVE-2026-53043 | 9.1 | Jun 24 | ocfs2/dlm: validate qr_numregions in dlm_match_regions() Affected: 2.6.37 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-52999 | 9.1 | Jun 24 | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching Affected: 4.19.26 before 4.20; 4.20.13 before 5.0; 5.0.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; +8 more |
| CVE-2026-52958 | 9.1 | Jun 24 | libceph: Fix potential out-of-bounds access in osdmap_decode() Affected: 5.3 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +4 more |
| CVE-2026-46266 | 9.1 | Jun 3 | inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP Affected: 2.6.12.1 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.14; 6.19 before 6.19.4; 2.6.12; 2.6.12; +3 more |
| CVE-2026-46244 | 9.1 | Jun 3 | netfilter: nft_inner: Fix IPv6 inner_thoff desync Affected: 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-46185 | 9.1 | May 28 | smb/client: fix out-of-bounds read in symlink_data() Affected: 6.0.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-46155 | 9.1 | May 28 | smb/client: fix out-of-bounds read in smb2_compound_op() Affected: 6.6.32 before 6.6.140; 6.9 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46119 | 9.1 | May 28 | libceph: Fix slab-out-of-bounds access in auth message processing Affected: 2.6.34.1 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; +7 more |
The 500 most important CVEs for this product (exploited first, then by severity)