KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,220
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 279High 217Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-35960 | 9.1 | May 20 | net/mlx5: Properly link new fs rules into the tree Affected: 4.10 before 4.19.313; 4.20 before 5.4.275; 5.5 before 5.10.216; 5.11 before 5.15.156; 5.16 before 6.1.87; 6.2 before 6.6.28; +4 more |
| CVE-2024-35845 | 9.1 | May 17 | wifi: iwlwifi: dbg-tlv: ensure NUL termination Affected: 5.5 before 5.10.214; 5.11 before 5.15.153; 5.16 before 6.1.83; 6.2 before 6.6.23; 6.7 before 6.7.11; 6.8 before 6.8.2 |
| CVE-2023-38432 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.10 Affected: 5.15 before 5.15.121; 5.16 before 6.1.36; 6.2 before 6.3.10 |
| CVE-2023-38431 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.8 Affected: 5.15 before 5.15.145; 5.16 before 6.1.34; 6.2 before 6.3.8 |
| CVE-2023-38430 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.9 Affected: 5.15 before 5.15.145; 5.16 before 6.1.35; 6.2 before 6.3.9 |
| CVE-2023-38428 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.4 Affected: 5.15 before 5.15.113; 5.16 before 6.1.30; 6.2 before 6.3.4 |
| CVE-2023-38426 | 9.1 | Jul 18 | An issue was discovered in the Linux kernel before 6.3.4 Affected: 5.15 before 5.15.113; 5.16 before 6.1.30; 6.2 before 6.3.4 |
| CVE-2014-3180 | 9.1 | Nov 6 | In kernel/compat.c in the Linux kernel before 3.17, as used in Google Chrome OS and other products, there is a possible out-of-bounds read Affected: before 3.17 |
| CVE-2019-15926 | 9.1 | Sep 4 | An issue was discovered in the Linux kernel before 5.2.3 Affected: 3.2 before 3.16.74; 3.17 before 4.4.187; 4.5 before 4.9.187; 4.10 before 4.14.135; 4.15 before 4.19.61; 4.20 before 5.1.20; +1 more |
| CVE-2011-3188 | 9.1 | May 24 | The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes… Affected: before 3.1 |
| CVE-2026-64106 | 9.0 | Jul 19 | KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Affected: 4.12 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; +3 more |
| CVE-2026-98115 | 8.8 | Sep 25 | ksmbd: safely drain sessions during logoff Affected: 6.6.48 before 6.7; 6.10.7 before 6.11; 6.11.1 before 7.2.7; 6.11; 6.11; 6.11; +2 more |
| CVE-2026-64445 | 8.8 | Jul 25 | staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Affected: 4.12 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +3 more |
| CVE-2026-64441 | 8.8 | Jul 25 | staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Affected: 4.12 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; 6.19 before 7.1.4; +2 more |
| CVE-2026-64438 | 8.8 | Jul 25 | crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Affected: 4.3 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; +1 more |
| CVE-2026-64437 | 8.8 | Jul 25 | ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Affected: 6.1.176 before 6.1.178; 6.6.143 before 6.6.145; 6.12.94 before 6.12.96; 6.18.36 before 6.18.39; 7.0.13 before 7.1; 7.1.1 before 7.1.4; +2 more |
| CVE-2026-64434 | 8.8 | Jul 25 | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Affected: 5.10.259 before 5.10.265; 5.15.210 before 5.15.216; 6.1.176 before 6.1.183; 6.6.143 before 6.6.145; 6.12.93 before 6.12.97; 6.18.35 before 6.18.39; +5 more |
| CVE-2026-64408 | 8.8 | Jul 25 | Bluetooth: bnep: pin L2CAP connection during netdev registration Affected: 3.13 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +3 more |
| CVE-2026-64396 | 8.8 | Jul 25 | ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64394 | 8.8 | Jul 25 | ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Affected: 5.15 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64390 | 8.8 | Jul 25 | ksmbd: track the connection owning a byte-range lock Affected: 5.15 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; 6.13 before 6.18.40; 6.19 before 7.1.4 |
| CVE-2026-64382 | 8.8 | Jul 25 | smb: client: fix double-free in SMB2_open() replay Affected: 6.6.32 before 6.6.145; 6.8.1 before 6.12.96; 6.13 before 6.18.39; 6.19 before 7.1.4; 6.8; 6.8; +5 more |
| CVE-2026-64366 | 8.8 | Jul 25 | HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert Affected: 6.15 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64364 | 8.8 | Jul 25 | HID: multitouch: fix out-of-bounds bit access on mt_io_flags Affected: 5.10.246 before 5.10.261; 5.15.196 before 5.15.212; 6.1.158 before 6.1.178; 6.6.114 before 6.6.145; 6.12.55 before 6.12.97; 6.17.5 before 6.18; +11 more |
| CVE-2026-64313 | 8.8 | Jul 25 | crypto: ecc - Fix carry overflow in vli multiplication Affected: 4.8 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.96; 6.13 before 6.18.39; +1 more |
| CVE-2026-64280 | 8.8 | Jul 25 | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Affected: 4.19 before 6.6.148; 6.7 before 6.12.101; 6.13 before 6.18.39; 6.19 before 7.1.4 |
| CVE-2026-64255 | 8.8 | Jul 24 | wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Affected: 6.4 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-64206 | 8.8 | Jul 20 | Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Affected: 3.15.5 before 3.16; 3.16.1 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.97; +10 more |
| CVE-2026-64178 | 8.8 | Jul 19 | Bluetooth: bnep: Fix UAF read of dev->name Affected: 2.6.12.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +10 more |
| CVE-2026-64153 | 8.8 | Jul 19 | drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64138 | 8.8 | Jul 19 | ksmbd: validate SID in parent security descriptor during ACL inheritance Affected: 5.15 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-64124 | 8.8 | Jul 19 | net: devmem: reject dma-buf bind with non-page-aligned size or SG length Affected: 6.16 before 6.18.35; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64117 | 8.8 | Jul 19 | wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Affected: 6.4 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64115 | 8.8 | Jul 19 | vsock/vmci: fix UAF when peer resets connection during handshake Affected: 3.9 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64109 | 8.8 | Jul 19 | af_unix: Fix UAF read of tail->len in unix_stream_data_wait() Affected: 4.2 before 6.6.143; 6.7 before 6.12.92; 6.13 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; +2 more |
| CVE-2026-64096 | 8.8 | Jul 19 | batman-adv: mcast: fix use-after-free in orig_node RCU release Affected: 3.15 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64093 | 8.8 | Jul 19 | batman-adv: tp_meter: directly shut down timer on cleanup Affected: 4.8 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.34; 6.19 before 7.0.11; +4 more |
| CVE-2026-64088 | 8.8 | Jul 19 | batman-adv: tt: fix negative tt_buff_len Affected: 3.1 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +5 more |
| CVE-2026-64042 | 8.8 | Jul 19 | vfio/pci: Check BAR resources before exporting a DMABUF Affected: 6.19 before 7.0.11; 7.1; 7.1; 7.1 |
| CVE-2026-64030 | 8.8 | Jul 19 | wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Affected: 6.15 before 6.18.34; 6.19 before 7.0.11; 7.1; 7.1; 7.1; 7.1 |
| CVE-2026-64010 | 8.8 | Jul 19 | nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() Affected: 3.6 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63975 | 8.8 | Jul 19 | Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp Affected: 5.7 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63947 | 8.8 | Jul 19 | Bluetooth: HIDP: fix missing length checks in hidp_input_report() Affected: 2.6.12.1 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; +10 more |
| CVE-2026-63946 | 8.8 | Jul 19 | Bluetooth: ISO: fix UAF in iso_recv_frame Affected: 6.0 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; +4 more |
| CVE-2026-63944 | 8.8 | Jul 19 | Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync Affected: 6.4 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; +3 more |
| CVE-2026-63941 | 8.8 | Jul 19 | KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor Affected: 6.11 before 6.18.57; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-63937 | 8.8 | Jul 19 | KVM: SEV: Use READ_ONCE() when reading entries/indices from PSC buffer Affected: 6.11 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-63923 | 8.8 | Jul 19 | octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify Affected: 6.13 before 6.18.42; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-63921 | 8.8 | Jul 19 | ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). Affected: 3.15 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-63919 | 8.8 | Jul 19 | xfrm: input: hold netns during deferred transport reinjection Affected: 5.6 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
The 500 most important CVEs for this product (exploited first, then by severity)