KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,210
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63865 | 8.8 | Jul 19 | bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks Affected: 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-63863 | 8.8 | Jul 19 | drm/gpusvm: Fix unbalanced unlock in drm_gpusvm_scan_mm() Affected: 7.0 before 7.0.10 |
| CVE-2026-63832 | 8.8 | Jul 19 | wifi: mt76: add wcid publish check in mt76_sta_add Affected: 6.12.13 before 6.12.114; 6.13.2 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-63831 | 8.8 | Jul 19 | mac802154: llsec: add skb_cow_data() before in-place crypto Affected: 3.16 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63829 | 8.8 | Jul 19 | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Affected: 3.16 before 5.10.261; 5.11 before 5.15.212; 5.16 before 6.1.178; 6.2 before 6.6.145; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63807 | 8.8 | Jul 19 | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Affected: 5.12 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-63801 | 8.8 | Jul 19 | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Affected: 5.5 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-63796 | 8.8 | Jul 19 | ocfs2: reject oversized group bitmap descriptors Affected: 2.6.16 before 5.10.260; 5.11 before 5.15.211; 5.16 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; +1 more |
| CVE-2026-53375 | 8.8 | Jul 19 | drm/amdgpu/vce: Prevent partial address patches Affected: 4.2 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; 6.19 before 7.0.9 |
| CVE-2026-53374 | 8.8 | Jul 19 | drm/amdgpu: zero-initialize GART table on allocation Affected: 4.2 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; 6.19 before 7.0.9; 7.1; +1 more |
| CVE-2026-53360 | 8.8 | Jul 4 | KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use Affected: 6.10 before 6.12.93; 6.13 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53359 | 8.8 | Jul 4 | KVM: x86: Fix shadow paging use-after-free due to unexpected role Affected: 2.6.36 before 6.1.177; 6.2 before 6.6.144; 6.7 before 6.12.95; 6.13 before 6.18.38; 6.19 before 7.1.3 |
| CVE-2026-53358 | 8.8 | Jul 2 | Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() Affected: 3.4 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +6 more |
| CVE-2026-53354 | 8.8 | Jul 1 | arm64: errata: Mitigate TLBI errata on various Arm CPUs Affected: 3.7 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; +2 more |
| CVE-2026-53322 | 8.8 | Jun 26 | vfio/pci: Clean up DMABUFs before disabling function Affected: 6.19 before 7.0.10 |
| CVE-2026-53281 | 8.8 | Jun 26 | iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Affected: 6.12.57 before 6.13; 6.13.3 before 6.18.33; 6.19 before 7.0.10; 7.1; 7.1; 7.1 |
| CVE-2026-53277 | 8.8 | Jun 25 | KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation Affected: 6.12 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53275 | 8.8 | Jun 25 | ipv6: mcast: Fix use-after-free when processing MLD queries Affected: 2.6.15 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; +6 more |
| CVE-2026-53248 | 8.8 | Jun 25 | net: airoha: Fix use-after-free in metadata dst teardown Affected: 6.15 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53240 | 8.8 | Jun 25 | xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload Affected: 6.14 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53232 | 8.8 | Jun 25 | net: phy: clean the sfp upstream if phy probing fails Affected: 5.5 before 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-53200 | 8.8 | Jun 25 | KVM: arm64: nv: Fix handling of XN[0] when !FEAT_XNX Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53198 | 8.8 | Jun 25 | ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL Affected: 5.15 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.94; 6.13 before 6.18.36; 6.19 before 7.0.13; 7.1; +5 more |
| CVE-2026-53188 | 8.8 | Jun 25 | RDMA/core: Validate the passed in fops for ib_get_ucaps() Affected: 6.15 before 6.18.36; 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; +3 more |
| CVE-2026-53171 | 8.8 | Jun 25 | accel/ethosu: fix arithmetic issues in dma_length() Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53170 | 8.8 | Jun 25 | accel/ethosu: reject DMA commands with uninitialized length Affected: 6.19 before 7.0.13; 7.1; 7.1; 7.1; 7.1; 7.1; +1 more |
| CVE-2026-53075 | 8.8 | Jun 24 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls Affected: 2.6.30 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53072 | 8.8 | Jun 24 | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER Affected: 3.17 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53071 | 8.8 | Jun 24 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp Affected: 5.7 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +1 more |
| CVE-2026-53057 | 8.8 | Jun 24 | iommu/riscv: Add IOTINVAL after updating DDT/PDT entries Affected: 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-53053 | 8.8 | Jun 24 | iommu/amd: Fix clone_alias() to use the original device's devid Affected: 5.4.17 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-52952 | 8.8 | Jun 24 | iommu: Fix WARN_ON in __iommu_group_set_domain_nofail() due to reset Affected: 7.0 before 7.0.10; 7.1; 7.1; 7.1 |
| CVE-2026-52934 | 8.8 | Jun 24 | batman-adv: tvlv: reject oversized TVLV packets Affected: 3.13 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.34; +5 more |
| CVE-2026-52918 | 8.8 | Jun 24 | Bluetooth: serialize accept_q access Affected: 2.6.12.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.142; 6.7 before 6.12.92; 6.13 before 6.18.34; +10 more |
| CVE-2026-52911 | 8.8 | Jun 21 | ksmbd: scope conn->binding slowpath to bound sessions only Affected: 5.15 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; 6.19 before 7.0.10 |
| CVE-2026-46317 | 8.8 | Jun 9 | KVM: arm64: Reassign nested_mmus array behind mmu_lock Affected: 6.11 before 6.18.35; 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; +2 more |
| CVE-2026-46264 | 8.8 | Jun 3 | drm/xe/pf: Fix sysfs initialization Affected: 6.19 before 6.19.4 |
| CVE-2026-46238 | 8.8 | May 28 | batman-adv: stop caching unowned originator pointers in BAT IV Affected: 2.6.38 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46212 | 8.8 | May 28 | batman-adv: bla: prevent use-after-free when deleting claims Affected: 3.5 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46198 | 8.8 | May 28 | batman-adv: fix integer overflow on buff_pos Affected: 2.6.38 before 5.10.258; 5.11 before 5.15.209; 5.16 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.90; 6.13 before 6.18.32; +4 more |
| CVE-2026-46174 | 8.8 | May 28 | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Affected: 3.16.58 before 3.17; 4.4.144 before 4.5; 4.9.102 before 4.10; 4.14.1 before 5.10.256; 5.11 before 5.15.207; 5.16 before 6.1.173; +15 more |
| CVE-2026-46166 | 8.8 | May 28 | wifi: mac80211: use safe list iteration in radar detect work Affected: 6.12 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46152 | 8.8 | May 28 | wifi: mac80211: drop stray 'static' from fast-RX rx_result Affected: 6.4 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
| CVE-2026-46125 | 8.8 | May 28 | wifi: mac80211: remove station if connection prep fails Affected: 6.0 before 6.1.176; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-46113 | 8.8 | May 28 | KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Affected: 2.6.20 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-46056 | 8.8 | May 27 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers Affected: 3.7 before 6.1.175; 6.2 before 6.6.140; 6.7 before 6.12.86; 6.13 before 6.18.27; 6.19 before 7.0.4 |
| CVE-2026-45945 | 8.8 | May 27 | iommu/vt-d: Fix race condition during PASID entry replacement Affected: 6.13 before 6.19.4 |
| CVE-2026-43503 | 8.8 | May 23 | net: skbuff: propagate shared-frag marker through frag-transfer helpers Affected: 3.9 before 5.10.257; 5.11 before 5.15.208; 5.16 before 6.1.174; 6.2 before 6.6.141; 6.7 before 6.12.91; 6.13 before 6.18.33; +5 more |
| CVE-2026-43495 | 8.8 | May 21 | net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler Affected: 5.19 before 6.1.176; 6.2 before 6.6.140; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; +1 more |
| CVE-2026-43490 | 8.8 | May 15 | ksmbd: validate inherited ACE SID length Affected: 5.15 before 6.6.141; 6.7 before 6.12.88; 6.13 before 6.18.30; 6.19 before 7.0.7; 7.1; 7.1 |
The 500 most important CVEs for this product (exploited first, then by severity)