KE
Operating System
Kernel
On CISA KEVExploited in the wildRansomware-linked
15,208
CVEs
33
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 277High 219Medium 4Low 0
Watch
Add Kernel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43391 | 8.8 | May 8 | nsfs: tighten permission checks for handle opening Affected: 6.18 before 6.19.9; 7.0; 7.0 |
| CVE-2026-43334 | 8.8 | May 8 | Bluetooth: SMP: force responder MITM requirements before building the pairing response Affected: 3.3 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; +7 more |
| CVE-2026-43322 | 8.8 | May 8 | Bluetooth: hci_sync: Fix UAF in le_read_features_complete Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +2 more |
| CVE-2026-43284 | 8.8 | May 8 | xfrm: esp: avoid in-place decrypt on shared skb frags Affected: 4.11 before 5.10.255; 5.12 before 5.15.205; 5.16 before 6.1.171; 6.2 before 6.6.138; 6.7 before 6.12.87; 6.13 before 6.18.28; +1 more |
| CVE-2026-43283 | 8.8 | May 6 | net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle Affected: 3.15.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +4 more |
| CVE-2026-43249 | 8.8 | May 6 | 9p/xen: protect xen_9pfs_front_free against concurrent calls Affected: 4.14.308 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43239 | 8.8 | May 6 | smb: client: prevent races in ->query_interfaces() Affected: 5.19.1 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6; 5.19; 5.19; +4 more |
| CVE-2026-43232 | 8.8 | May 6 | net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets Affected: 4.9.337 before 4.10; 4.14.303 before 4.15; 4.19.270 before 4.20; 5.4.229 before 5.5; 5.10.163 before 5.10.252; 5.15.86 before 5.15.202; +7 more |
| CVE-2026-43215 | 8.8 | May 6 | cifs: Fix locking usage for tcon fields Affected: 6.0 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43187 | 8.8 | May 6 | xfs: delete attr leaf freemap entries when empty Affected: 2.6.12.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +6 more |
| CVE-2026-43176 | 8.8 | May 6 | wifi: rtw89: pci: validate release report content before using for RTL8922DE Affected: 6.18 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43172 | 8.8 | May 6 | wifi: iwlwifi: fix 22000 series SMEM parsing Affected: 5.8 before 6.18.16; 6.19 before 6.19.6 |
| CVE-2026-43158 | 8.8 | May 6 | xfs: fix freemap adjustments when adding xattrs to leaf blocks Affected: 2.6.12.1 before 5.10.252; 5.11 before 5.15.202; 5.16 before 6.1.165; 6.2 before 6.6.128; 6.7 before 6.12.75; 6.13 before 6.18.16; +6 more |
| CVE-2026-43113 | 8.8 | May 6 | wifi: wl1251: validate packet IDs before indexing tx_frames Affected: 2.6.31 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +4 more |
| CVE-2026-43112 | 8.8 | May 6 | fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath Affected: 5.16.1 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 5.16; 5.16; +8 more |
| CVE-2026-43110 | 8.8 | May 6 | wifi: brcmfmac: validate bsscfg indices in IF events Affected: 3.9 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0; 7.0; +5 more |
| CVE-2026-43048 | 8.8 | May 1 | HID: core: Mitigate potential OOB by removing bogus memset() Affected: 2.6.15.1 before 6.18.22; 6.19 before 6.19.12; 2.6.15; 2.6.15; 2.6.15; 7.0; +3 more |
| CVE-2026-43018 | 8.8 | May 1 | Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt Affected: 5.17 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31773 | 8.8 | May 1 | Bluetooth: SMP: derive legacy responder STK authentication from MITM state Affected: 3.15.5 before 3.16; 3.16.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; +9 more |
| CVE-2026-31739 | 8.8 | May 1 | crypto: tegra - Add missing CRYPTO_ALG_ASYNC Affected: 6.10 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31735 | 8.8 | May 1 | iommupt: Fix short gather if the unmap goes into a large mapping Affected: 6.19 before 6.19.12; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more |
| CVE-2026-31717 | 8.8 | May 1 | ksmbd: validate owner of durable handle on reconnect Affected: 6.6.32 before 6.7; 6.9 before 6.18.25; 6.19 before 7.0.2; 7.1 |
| CVE-2026-31709 | 8.8 | May 1 | smb: client: validate the whole DACL before rewriting it in cifsacl Affected: 5.12 before 7.0.2 |
| CVE-2026-31706 | 8.8 | May 1 | ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl() Affected: 5.15 before 6.12.84; 6.13 before 6.18.25; 6.19 before 7.0.2 |
| CVE-2026-31629 | 8.8 | Apr 24 | nfc: llcp: add missing return after LLCP_CLOSED checks Affected: 3.3 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31622 | 8.8 | Apr 24 | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Affected: 3.13 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31588 | 8.8 | Apr 24 | KVM: x86: Use scratch field in MMIO fragment to hold small write values Affected: 3.5 before 6.6.136; 6.7 before 6.12.83; 6.13 before 6.18.24; 6.19 before 6.19.14; 7.0 before 7.0.1 |
| CVE-2026-31570 | 8.8 | Apr 24 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() Affected: 5.4.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; +9 more |
| CVE-2026-31558 | 8.8 | Apr 24 | LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Affected: 6.10.1 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; 6.10; 7.0; 7.0; +5 more |
| CVE-2026-31553 | 8.8 | Apr 24 | KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Affected: 6.19.1 before 6.19.11; 6.19; 7.0; 7.0; 7.0; 7.0; +3 more |
| CVE-2026-31450 | 8.8 | Apr 22 | ext4: publish jinode after initialization Affected: 3.11.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.134; 6.7 before 6.12.81; 6.13 before 6.18.21; +9 more |
| CVE-2026-31435 | 8.8 | Apr 22 | netfs: Fix read abandonment during retry Affected: 6.12 before 6.18.21; 6.19 before 6.19.11; 7.0; 7.0; 7.0; 7.0; +2 more |
| CVE-2026-31433 | 8.8 | Apr 22 | ksmbd: fix potencial OOB in get_file_all_info() for compound requests Affected: 5.15.145 before 5.15.203; 6.1.71 before 6.1.168; 6.6 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +5 more |
| CVE-2026-31432 | 8.8 | Apr 22 | ksmbd: fix OOB write in QUERY_INFO for compound requests Affected: 5.15.145 before 5.16; 6.1.71 before 6.2; 6.6 before 6.12.81; 6.13 before 6.18.22; 6.19 before 6.19.12; 7.0; +5 more |
| CVE-2026-31409 | 8.8 | Apr 6 | ksmbd: unset conn->binding on failed binding request Affected: 5.15 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; 6.19 before 6.19.10; 7.0; +3 more |
| CVE-2026-31408 | 8.8 | Apr 6 | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Affected: 2.6.12.1 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; 6.19 before 6.19.11; +10 more |
| CVE-2026-23462 | 8.8 | Apr 3 | Bluetooth: HIDP: Fix possible UAF Affected: 3.10 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; +5 more |
| CVE-2026-23461 | 8.8 | Apr 3 | Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Affected: 6.6.84 before 6.6.130; 6.12.20 before 6.12.78; 6.13.8 before 6.14; 6.14.1 before 6.18.20; 6.19 before 6.19.10; 6.14; +9 more |
| CVE-2026-23395 | 8.8 | Mar 25 | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Affected: 5.7.1 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.167; 6.2 before 6.6.130; 6.7 before 6.12.78; 6.13 before 6.18.20; +9 more |
| CVE-2026-23246 | 8.8 | Mar 18 | wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration Affected: 6.5.1 before 6.6.130; 6.7 before 6.12.77; 6.13 before 6.18.17; 6.19 before 6.19.7; 6.5; 7.0 |
| CVE-2021-47670 | 8.8 | Apr 17 | In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix use after free bugs After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe Affected: 4.0 before 4.19.171; 4.20 before 5.4.93; 5.5 before 5.10.11; 5.11; 5.11; 5.11; +1 more |
| CVE-2021-47668 | 8.8 | Apr 17 | In the Linux kernel, the following vulnerability has been resolved: can: dev: can_restart: fix use after free bug After calling netif_rx_ni(skb), dereferencing skb is unsafe Affected: 2.6.31 before 4.4.254; 4.5 before 4.9.254; 4.10 before 4.14.218; 4.15 before 4.19.171; 4.20 before 5.4.93; 5.5 before 5.10.11; +4 more |
| CVE-2025-22041 | 8.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in… Affected: before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.13; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2025-22040 | 8.8 | Apr 16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup… Affected: 5.15 before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.23; 6.13 before 6.13.11; 6.14 before 6.14.2 |
| CVE-2022-49535 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI If lpfc_issue_els_flogi()… Affected: before 5.15.181; 5.16 before 5.18.3 |
| CVE-2022-49479 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix tx status related use-after-free race on station removal There is a small race window where ongoing… Affected: 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49470 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event We should not access skb buffer data anymore… Affected: 5.2 before 5.15.54; 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49416 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free in chanctx code In ieee80211_vif_use_reserved_context(), when we have an… Affected: 3.17 before 4.9.318; 4.10 before 4.14.283; 4.15 before 4.19.247; 4.20 before 5.4.198; 5.5 before 5.10.121; 5.11 before 5.15.46; +2 more |
| CVE-2022-49328 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: mt76: fix use-after-free by removing a non-RCU wcid pointer Fixes an issue caught by KASAN about… Affected: before 5.15.58; 5.16 before 5.17.14; 5.18 before 5.18.3 |
| CVE-2022-49238 | 8.8 | Feb 26 | In the Linux kernel, the following vulnerability has been resolved: ath11k: free peer for station when disconnect from AP for QCA6390/WCN6855 Commit b4a0f54156ac ("ath11k: move… Affected: 5.17 before 5.17.2 |
The 500 most important CVEs for this product (exploited first, then by severity)