KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,203
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46043 | 9.1 | May 27 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv Affected: 4.8 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; +1 more |
| CVE-2026-43407 | 9.1 | May 8 | libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Affected: 2.6.34.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.19; +11 more |
| CVE-2026-43406 | 9.1 | May 8 | libceph: prevent potential out-of-bounds reads in process_message_header() Affected: 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.19; 6.19 before 6.19.9; +3 more |
| CVE-2026-43197 | 9.1 | May 6 | netconsole: avoid OOB reads, msg is not nul-terminated Affected: 6.6 before 6.18.16; 6.19 before 6.19.6; 7.0 |
| CVE-2026-43117 | 9.1 | May 6 | btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Affected: 4.8 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +3 more |
| CVE-2026-43083 | 9.1 | May 6 | net: ioam6: fix OOB and missing lock Affected: 5.17 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-43071 | 9.1 | May 5 | dcache: Limit the minimal number of bucket to two Affected: 3.10.55 before 3.11; 3.12.29 before 3.13; 3.14.19 before 3.15; 3.16.3 before 3.17; 3.17.1 before 6.1.175; 6.2 before 6.6.136; +8 more |
| CVE-2026-31682 | 9.1 | Apr 25 | bridge: br_nd_send: linearize skb before parsing ND options Affected: 4.15 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +7 more |
| CVE-2026-31636 | 9.1 | Apr 24 | rxrpc: fix RESPONSE authenticator parser OOB read Affected: 6.16.1 before 6.18.23; 6.19 before 6.19.13; 6.16; 7.0; 7.0; 7.0; +4 more |
| CVE-2026-23455 | 9.1 | Apr 3 | netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Affected: 2.6.17 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; +5 more |
| CVE-2024-47685 | 9.1 | Oct 21 | netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() Affected: 3.18 before 4.19.323; 4.20 before 5.4.285; 5.5 before 5.10.227; 5.11 before 5.15.168; 5.16 before 6.1.113; 6.2 before 6.6.54; +2 more |
| CVE-2024-36896 | 9.1 | May 30 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in… Affected: 6.0 before 6.1.91; 6.2 before 6.6.31; 6.7 before 6.8.10; 6.9; 6.9; 6.9; +3 more |
| CVE-2021-47478 | 9.1 | May 22 | In the Linux kernel, the following vulnerability has been resolved: isofs: Fix out of bound access for corrupted isofs image When isofs image is suitably corrupted… Affected: before 4.4.292; 4.5 before 4.9.290; 4.10 before 4.14.255; 4.15 before 4.19.217; 4.20 before 5.4.159; 5.5 before 5.10.79; +2 more |
| CVE-2023-52832 | 9.1 | May 21 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211_get_tx_power() We can get a UBSAN warning if… Affected: before 4.14.331; 4.15 before 4.19.300; 4.20 before 5.4.262; 5.5 before 5.10.202; 5.11 before 5.15.140; 5.16 before 6.1.64; +2 more |
| CVE-2023-52735 | 9.1 | May 21 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never… Affected: before 5.15.95; 5.16 before 6.1.13; 6.2; 6.2; 6.2; 6.2; +2 more |
| CVE-2021-47348 | 9.1 | May 21 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid HDCP over-read and corruption Instead of reading the desired 5 bytes of the actual… Affected: before 5.10.51; 5.11 before 5.12.18; 5.13 before 5.13.3 |
| CVE-2024-35960 | 9.1 | May 20 | net/mlx5: Properly link new fs rules into the tree Affected: 4.10 before 4.19.313; 4.20 before 5.4.275; 5.5 before 5.10.216; 5.11 before 5.15.156; 5.16 before 6.1.87; 6.2 before 6.6.28; +4 more |
| CVE-2024-35845 | 9.1 | May 17 | wifi: iwlwifi: dbg-tlv: ensure NUL termination Affected: 5.5 before 5.10.214; 5.11 before 5.15.153; 5.16 before 6.1.83; 6.2 before 6.6.23; 6.7 before 6.7.11; 6.8 before 6.8.2 |
| CVE-2023-38432 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.10 Affected: 5.15 before 5.15.121; 5.16 before 6.1.36; 6.2 before 6.3.10 |
| CVE-2023-38431 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.8 Affected: 5.15 before 5.15.145; 5.16 before 6.1.34; 6.2 before 6.3.8 |
| CVE-2023-38430 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.9 Affected: 5.15 before 5.15.145; 5.16 before 6.1.35; 6.2 before 6.3.9 |
| CVE-2023-38428 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.4 Affected: 5.15 before 5.15.113; 5.16 before 6.1.30; 6.2 before 6.3.4 |
| CVE-2023-38426 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.4 Affected: 5.15 before 5.15.113; 5.16 before 6.1.30; 6.2 before 6.3.4 |
| CVE-2014-3180 | 9.1 | Nov 6 | In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read Affected: before 3.17 |
| CVE-2019-15926 | 9.1 | Sep 4 | An issue was discovered in the Linux kernel before 5.2.3 Affected: 3.2 before 3.16.74; 3.17 before 4.4.187; 4.5 before 4.9.187; 4.10 before 4.14.135; 4.15 before 4.19.61; 4.20 before 5.1.20; +1 more |
| CVE-2011-3188 | 9.1 | May 24 | The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes… Affected: before 3.1 |
| CVE-2026-64106 | 9.0 | Jul 19 | KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Affected: 4.12 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)