LI
Product
Linux
On CISA KEVExploited in the wild
12,971
CVEs
12
On KEV
10.0
Max CVSS
1052
New 30D
Severity mix
Critical 489High 9Medium 2Low 0
Watch
Add Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-40252 | 9.8 | Dec 4 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() Affected: 55482edc25f0606851de42e73618f813f310d009 before ecbb12caf399d7cf364b7553ed5aebeaa2f255bc; 55482edc25f0606851de42e73618f813f310d009 before a778912b4a53587ea07d85526d152f85d109cbfe; 55482edc25f0606851de42e73618f813f310d009 before f0923011c1261b33a2ac1de349256d39cb750dd0; 55482edc25f0606851de42e73618f813f310d009 before 917a9d02182ac8b4f25eb47dc02f3ec679608c24; 55482edc25f0606851de42e73618f813f310d009 before e441db07f208184e0466abf44b389a81d70c340e; 55482edc25f0606851de42e73618f813f310d009 before 896f1a2493b59beb2b5ccdf990503dbb16cb2256; +1 more |
| CVE-2025-40212 | 9.8 | Nov 24 | nfsd: fix refcount leak in nfsd_set_fh_dentry() Affected: ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before b6bc86ce3944b10b9fc181fc00c1a520a20ed965; ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before c83d7365cec5eb5ebeeee2a72e29b4ca58a7e4c2; ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444 before 8a7348a9ed70bda1c1f51d3f1815bcbdf9f3b38c; 6.12 |
| CVE-2025-40176 | 9.8 | Nov 12 | tls: wait for pending async decryptions if tls_strp_msg_hold fails Affected: 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 9f83fd0c179e0f458e824e417f9d5ad53443f685; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before c61d4368197d65c4809d9271f3b85325a600586a; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 39dec4ea3daf77f684308576baf483b55ca7f160; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before 4fc109d0ab196bd943b7451276690fb6bb48c2e0; 84c61fe1a75b4255df1e1e7c054c9e6d048da417 before b8a6ff84abbcbbc445463de58704686011edc8e1; 6.0 |
| CVE-2025-40074 | 9.8 | Oct 28 | ipv4: start using dst_dev_rcu() Affected: 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 864155c164654110f68a17a63bd0339754790d67; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before e150f273cd8ed34ebc6d03758aad95c12fc58337; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 684efb2c86c887685f9aa65e1a21b3df6c1f822d; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 923e0734c386984d45de508528a7a7ad91d791cc; 4a6ce2b6f2ecabbddcfe47e7cf61dd0f00b10e36 before 6ad8de3cefdb6ffa6708b21c567df0dbf82c43a8; 4.13 |
| CVE-2025-39975 | 9.8 | Oct 15 | smb: client: fix wrong index reference in smb2_compound_op() Affected: 5ddcc9e92d54548219985ce4de88618fb53e14ec before ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5; efe8db3ecaa40a8520dc9a54283dcecd82ceea9c before bfb1e2aad1fecef8320fd71332acde0d53a8d699; 3681c74d342db75b0d641ba60de27bf73e16e66b before 093615fc76063ea08d454ba86677ce64c736e806; 3681c74d342db75b0d641ba60de27bf73e16e66b before fbe2dc6a9c7318f7263f5e4d50f6272b931c5756; 77aefd1d9b790f60634adebbdcfffbe934f41c34; 6.6.75 before 6.6.109; +3 more |
| CVE-2025-21796 | 9.8 | Feb 27 | nfsd: clear acl_access/acl_default after releasing them Affected: a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 8a1737ae42c928384ab6447f6ee1a882510e85fa; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 6f7cfee1a316891890c505563aa54f3476db52fd; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 2e59b2b68782519560b3d6a41dd66a3d01a01cd3; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 55d947315fb5f67a35e4e1d3e01bb886b9c6decf; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before f8d871523142f7895f250a856f8c4a4181614510; a257cdd0e2179630d3201c32ba14d7fcb3c3a055 before 1fd94884174bd20beb1773990fd3b1aa877688d9; +2 more |
| CVE-2024-53177 | 9.8 | Dec 27 | smb: prevent use-after-free due to open_cached_dir error paths Affected: 93877b9afc2994c89362007aac480a7b150f386f before 791f833053578b9fd24252ebb7162a61bc3f805b; 5c86919455c1edec99ebd3338ad213b59271a71b before 97e2afcac0bebfef6a5360f4267ce4c44507b845; 5c86919455c1edec99ebd3338ad213b59271a71b before 47655a12c6b1bca8fa230085eab2e85a076932b7; 5c86919455c1edec99ebd3338ad213b59271a71b before a9685b409a03b73d2980bbfa53eb47555802d0a9; 6db94d08359c43f2c8fe372811cdee04564a41b9; 6.6.3 before 6.6.64; +2 more |
| CVE-2026-68124 | 9.6 | Aug 10 | mctp: serial: handle zero-length frames to prevent rx buffer overflow Affected: a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 64b96ae7912244d55257aa330d9569ee0a8f8d99; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 36dc6d6964a3b90411cc7944cd9b8b6f67b9807b; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 68819427bc07eca7963a9e8be19e5272cc29186c; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before f80ba170d7b3a44e3d244a2c8e06031d61bf3b23; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 06a6b606129c8a25cd457760f5370f3ff01fe05d; a0c2ccd9b5ad0a9e838158404e041b5a8ff762dd before 793b9b729f1e8de57be8c8daf1a9838be96cabed; +1 more |
| CVE-2026-90110 | 9.4 | Sep 17 | inetpeer: randomize RB-tree node comparison using SipHash Affected: b145425f269a17ed344d737f746b844dfac60c82 before b20e98f0bb668a59abaf7bcf85d75c073e90d352; b145425f269a17ed344d737f746b844dfac60c82 before 5f127e3cc9647a8a70db12c65dbd0de473545380; b145425f269a17ed344d737f746b844dfac60c82 before 199fcf285e498111e029137d088949bc6c26d578; b145425f269a17ed344d737f746b844dfac60c82 before 857681f6835d5b0a7bc4a34a026baeaaf5215623; b145425f269a17ed344d737f746b844dfac60c82 before 7109bb63667a53e4542ad845476f97d0c8b28a61; b145425f269a17ed344d737f746b844dfac60c82 before 2ee66e9487172fcd189bc52a767c30dad7141c09; +1 more |
| CVE-2026-80585 | 9.4 | Aug 26 | mptcp: fastopen: only mark MPTFO subflows with SYN data Affected: 36b122baf6a8bd46b4a591f12f4ed17b22257408 before f75f174edc865738522e514d042cf5627f084859; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before fca7e444c04689fe4cc6b56f2725f804a4bb1ef9; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before 75e564b2ced1cc3d9a8904c7d2d2bb448fffb8b5; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before 72b4a0c51a4b550d40301d60a366b429b8c8e78d; 36b122baf6a8bd46b4a591f12f4ed17b22257408 before e00b63056fb4f261455b3e5df5268a1f8ce47a87; 6.2 |
| CVE-2026-74751 | 9.4 | Aug 26 | riscv: lib: Fix ZBB strnlen reading past count boundary Affected: 5ba15d419fab848a3813eb56bbcad00e291fbc49 before e697e30f3dd2da3a1df7dc0980546d5b53aea4b6; 5ba15d419fab848a3813eb56bbcad00e291fbc49 before 5d588c684833e678a0008eb69c33190f01a65f4b; 7.1 |
| CVE-2026-72318 | 9.4 | Aug 15 | cifs: validate DFS referral string offsets Affected: 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 76c607b9353d377b1d1b11db50e743eee0ccf658; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before d64b6be5740ce230aca184d8d224c75d9866045d; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 929a85932d14190988f1eafd6ee8cc68d66ace0b; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before b784cd1c24d89bf71be2efe1e948ff7c03371e57; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before c37abc99bb3de3d3219ecef253d649f74117fd83; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 027a84ac6b50c12ef767c15abfc58aa865820e9e; +1 more |
| CVE-2026-64024 | 9.4 | Jul 19 | tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Affected: 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 8bb6aa419b142dcc2680177ecc39c4c38db7fc16; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before e47f7060eaf60894e3e4d0e3c4fe6e1f2eacfbdd; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 4affe063fa56c880cbea8d0bfded0bb80751579d; 41eecbd712b73f0d5dcf1152b9a1c27b1f238028 before 1bbf0ced1d9db73ac7893c2187f3459288603e0d; 6.10 |
| CVE-2026-63830 | 9.4 | Jul 19 | net: skmsg: preserve sg.copy across SG transforms Affected: d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before f126eed589eec6f201405abbc398844042ef6d57; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 31a110642b5fb5e61940cbcfb503445ac4f28017; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 9bb86d8184b37503816150c4a6ad3c17dfdbe827; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 0eb4c16c4adb262763bda870a8ed38a1a9dec7ec; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before d22cc92bc41290e5783a72375e0843d9435f6001; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca before 1acdd14c0990dd1cd4b6534f00366d2e6dfce05f; +3 more |
| CVE-2026-53131 | 9.4 | Jun 25 | netfilter: require Ethernet MAC header before using eth_hdr() Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4435888e1bf139d2bfe5911643d4217382136743; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 063f43361e884acd7300790e90194430275d0d0c; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 726abf97566867f808fec9d8a408eb9698bd570a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 367abcacc13a8e2e7624408b7f593bd1e60e49d9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5d634afb8b83b49de562792fd0d047416a43bd4d; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cea435ea7e868ea6fdf039bc4f2090c1d829b556; +2 more |
| CVE-2026-43383 | 9.4 | May 8 | net/tcp-md5: Fix MAC comparison to be constant-time Affected: cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 821c8751fdeecdeecabeb11704dd33439c9e4bbc; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before ff44ec94d4fc8348600a69de0a8fa1102c23bce8; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 345a9530756528d7ca407663d659c3c40e75c3dd; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 5d305a95130a8d08b9545e47f1e18d29d59866cb; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before 02669e2a4d207068edce7e8b5fafd85822018ce6; cfb6eeb4c860592edd123fdea908d23c6ad1c7dc before ae3831b44f477de048287493e184fc3ff913b624; +3 more |
| CVE-2026-43114 | 9.4 | May 6 | netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry Affected: 7400b063969bdca4a06cd97f1294d765c8eecbe1 before f8c39983fc9c1a978c82e6f2df7bfba8a8561587; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before c7babe2f28b507e17f28e9f753b7caec72d4857f; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 1c43f0dd8691ddf8884793b481ddc7511cf593c3; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before fa4f1f52528c73989d820f32bfca06bec5afeece; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 3d53f9aafd469ae1ea27051e00f5b96ca1b55d52; 7400b063969bdca4a06cd97f1294d765c8eecbe1 before 07de44424bb7f17ef9357e8535df96d9e97c40cb; +3 more |
| CVE-2026-31685 | 9.4 | Apr 25 | netfilter: ip6t_eui64: reject invalid MAC header for all packets Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4d75bc2cd093bf5803edf512c099bfb220fd6459; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7d6a57411caf54df025860c9b1a82cd42d57a562; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d5603591373441fecf9951833d6d873e09320f08; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 288138418bef956f8b295751a4536c60f0e89f4a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9eda5478746ef7dc0e4e537b5a5e4b0ca1027091; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 807d6ee15804df6f01a35c910f09612e858739a6; +3 more |
| CVE-2026-31448 | 9.4 | Apr 22 | ext4: avoid infinite loops caused by residual data Affected: 315054f023d28ee64f308adf8b5737831541776b before c66545e83a802c3851d9be27a41c0479dd29ff0c; 315054f023d28ee64f308adf8b5737831541776b before ecc50bfca9b5c2ee6aeef998181689b80477367b; 315054f023d28ee64f308adf8b5737831541776b before 3a7667595bcad84da53fc156a418e110267c3412; 315054f023d28ee64f308adf8b5737831541776b before 416c86f30f91b4fb2642ef6b102596ca898f41a5; 315054f023d28ee64f308adf8b5737831541776b before 64f425b06b3bea9abc8977fd3982779b3ad070c9; 315054f023d28ee64f308adf8b5737831541776b before 5422fe71d26d42af6c454ca9527faaad4e677d6c; +1 more |
| CVE-2025-40099 | 9.4 | Oct 30 | cifs: parse_dfs_referrals: prevent oob on malformed input Affected: 4ecce920e13ace16a5ba45efe8909946c28fb2ad before cfacc7441f760e4a73cc71b6ff1635261d534657; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 15c73964da9df994302f579ed14ee5fdbce7a332; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 8bc4a8d39bac23d8b044fd3e2dbfd965f1d9b058; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before bb0f2e66e1ac043a5b238f5bcab4f26f3c317039; 4ecce920e13ace16a5ba45efe8909946c28fb2ad before 6447b0e355562a1ff748c4a2ffb89aae7e84d2c9; 4.11 |
| CVE-2026-98464 | 9.3 | Oct 18 | RISC-V: KVM: Synchronize hrtimer callback during teardown Affected: 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before 9bdbae64ae0dab93041ebc57ec4e93def793fc2d; 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before 2af03b606aadaaeb386658ef798c79bdcdef87c1; 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before e66aced74f0122380603c9910a71d77618b28f0e; 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before ea91f05a55b807ead3166546a2c75f4185ca645f; 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before 3cc6184bd5920c9685d87f4e260568feba08650d; 3a9f66cb25e18a3eeca36c08d9f823a35b3ddc22 before aaad136d56d91252517272b68cd533e5714698d5; +1 more |
| CVE-2026-99999 | 9.3 | Oct 15 | ipv4: validate checksum_start before completing checksum Affected: f43798c27684ab925adde7d8acc34c78c6e50df8 before a464d950f31c89565cbaae038cc60db04fe01956; f43798c27684ab925adde7d8acc34c78c6e50df8 before 0fab003ef4698e0628060a45a48f14b43ba2a40a; f43798c27684ab925adde7d8acc34c78c6e50df8 before 94524b7b32691de2e2ce162c04d6cbc9106e5cbf; f43798c27684ab925adde7d8acc34c78c6e50df8 before a65f69e0f38ffbed1b128029e09097436416dc8b; f43798c27684ab925adde7d8acc34c78c6e50df8 before 32a8b0adaa18e52aaa0b246b5ffe683075354dbb; f43798c27684ab925adde7d8acc34c78c6e50df8 before f3e835af6226f1dd12160cbd696081e9b6155de0; +3 more |
| CVE-2026-90049 | 9.3 | Sep 16 | net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() Affected: 36d5fe6a000790f56039afe26834265db0a3ad4c before 849bdb83123760a865bcb2970127f4c0b9423ba3; 36d5fe6a000790f56039afe26834265db0a3ad4c before fb10e0e9b220a2eed08931a60dbaad9a2370c908; 36d5fe6a000790f56039afe26834265db0a3ad4c before 767ec2a65cc022d303b0c9c12811e7db22057341; 36d5fe6a000790f56039afe26834265db0a3ad4c before 8069643ae64dfdf634b6c78c7f622e5323031436; 36d5fe6a000790f56039afe26834265db0a3ad4c before 04dd250a78e268af3e7124beb1dc10ec1dd88d60; 36d5fe6a000790f56039afe26834265db0a3ad4c before a13b1e80e5015cd732440b475c0ef443dc4a2157; +7 more |
| CVE-2026-89930 | 9.3 | Sep 16 | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter Affected: 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before c0c66cd575e31218da6a7d104c6ef80b0830b60c; 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before 1025b938dc439b75c720a568a855a13eeb245686; 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before 312cdb6d8940827dea63a7a52fb714a5049f06d1; 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before f74fccdf4f7fb0780cd84944108d35f3d9dc46a7; 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before c43563e7518e65ec6ccaa6a65f84c5af5ca5d379; 5c614b3583e7b6dab0c86356fa36c2bcbb8322a0 before 62c3ee4c9f0e2efef5157358b3549e50ede96d73; +2 more |
| CVE-2026-89918 | 9.3 | Sep 16 | KVM: arm64: Correctly handle end of VA space TLBI invalidation Affected: 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before ce447651a52ec077694172af10c4fffb11f56c43; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before c624731ca6fe59ad8909ce4108301aa7560a91d6; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before 34af2c3e31f91a739dc175459fdbd99ed952b457; 6.16 |
| CVE-2026-89916 | 9.3 | Sep 16 | KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry Affected: 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before d8580e7aa189b0c6c5bb4d94b8352728a7c35bbd; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before 11ee3faab4f1755d126bead9f882e75a7a677860; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before 2b7324f3a0c1072b9d578b8d42f199506753f26e; 6.16 |
| CVE-2026-89915 | 9.3 | Sep 16 | KVM: arm64: Remove VM-wide VNCR mapping counter Affected: 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before 5453b85c7ebb605febac3df42021f9471663f051; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before 87c2bbf189829dce4aaada8f82e3d54ccc037976; 4ffa72ad8f37e73bbb6c0baa88557bcb4fd39929 before c55bc773b6e814406658fae7dc5c15f639ed816e; 6.16 |
| CVE-2026-89914 | 9.3 | Sep 16 | KVM: arm64: Sign-extend VA for range-based TLBI invalidation Affected: 85bba00425ae0b4b30938ebfdde6d986e5423aff before 72bce82c4171bf330919ff1b64dc0a36c254ec7d; 85bba00425ae0b4b30938ebfdde6d986e5423aff before 3feb83918e30f0472e058224b926ebfe8a064fac; 85bba00425ae0b4b30938ebfdde6d986e5423aff before 2393470085649f0b973ecceb26fe8fc71edde0c1; 6.16 |
| CVE-2026-89775 | 9.3 | Sep 16 | KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Affected: 7270cc9157f474dfc46750a34c9d7defc686b2eb before be54a70067c7dbe1381157e8a238fa4b16ea9c05; 7270cc9157f474dfc46750a34c9d7defc686b2eb before 1c9fca34b9625a67a7f1a03c8604f3df760c6c49; 7270cc9157f474dfc46750a34c9d7defc686b2eb before 8053393680d4fa3eb962667d2be95dd39f0940e5; 6.16 |
| CVE-2026-89448 | 9.3 | Sep 11 | iommu/vt-d: Force requesting ACS when tboot is enabled Affected: 5d990b627537e59a3a2f039ff588a4750e9c1a6a before 579eb867d3da63f3b5e32f235925e1daa7ec70d0; 5d990b627537e59a3a2f039ff588a4750e9c1a6a before aaeb81241e802c86be69394f72d49fde3f861fbb; 5d990b627537e59a3a2f039ff588a4750e9c1a6a before 45705a6bfdb283f7b3b509010fd617b72f942537; 5d990b627537e59a3a2f039ff588a4750e9c1a6a before 87bc611c6c98a41c00feb7b06b0c297dd141a2ae; 5d990b627537e59a3a2f039ff588a4750e9c1a6a before 607432b2618b61df81134be0ef2562b8300c1216; 2.6.33 |
| CVE-2026-80693 | 9.3 | Aug 28 | idpf: bound interrupt-vector register fill to the allocated array Affected: d4d5587182664b0c4ab6d3556ce881cb975507c2 before a6447b6a9678e701ca4d32789f311067cf528c2d; d4d5587182664b0c4ab6d3556ce881cb975507c2 before e299b7d1334ebec4d43a7bb697d10c12df1aaed3; d4d5587182664b0c4ab6d3556ce881cb975507c2 before 41bb8748124d0d8ee5d8e1eace9dfbc874bc9564; d4d5587182664b0c4ab6d3556ce881cb975507c2 before 9f7007ee9858c99aa43101bc8352c672fee85644; 6.7 |
| CVE-2026-80684 | 9.3 | Aug 28 | KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Affected: 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before 96099486b63985801c9c6ef22505e9aa635b2d20; 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before 0a95abe964400771ad82b027d7b84a0d183cd0db; 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before df947d85e164a50a29d43a96e814f69ab1d0f7ed; 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before e137d082325bbcae780087b57501d38585e625d9; 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before d1a103dc9016c25e7423ce5841a5cc2df76d59f3; 3c5a1b6f0a18520a0edd0600fef6f1a8553b8fdc before 8bf09b9b7d3232806df95f409581f8a9fd99a3fa; +1 more |
| CVE-2026-80671 | 9.3 | Aug 28 | perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Affected: ec156764d424dd67283c2cd5e9f6f1b8388364ac before 344e59fc4f2cba6dc04ce5e2a77388645d4ca834; ec156764d424dd67283c2cd5e9f6f1b8388364ac before 22263d241bad753217d545f8085b7ead52e2873b; ec156764d424dd67283c2cd5e9f6f1b8388364ac before 2003918e13f43cf6c5698be3cc9aa3657dd676a8; ec156764d424dd67283c2cd5e9f6f1b8388364ac before 29639f00bfa49da7904ba0a499e0da7a0e5d735e; ec156764d424dd67283c2cd5e9f6f1b8388364ac before 261d2b5f4afa0570ca906e553c93811c5abe4590; ec156764d424dd67283c2cd5e9f6f1b8388364ac before 652cea73b7b7b7c622a2be670e44e3c499c6d49f; +3 more |
| CVE-2026-80554 | 9.3 | Aug 26 | s390/vfio_ccw: Limit the number of channel program segments Affected: 0a19e61e6d4c6192077ead760ba0a2d350987d4c before 15fb4559a7fdf0b8725e433a71cfd03a1313a48b; 0a19e61e6d4c6192077ead760ba0a2d350987d4c before a1625f66eaa1200068a0e2c05bc90e65182fc4e3; 0a19e61e6d4c6192077ead760ba0a2d350987d4c before 06f4d6e5a8af6c2072e8cd39dbc512c683ca7fb2; 0a19e61e6d4c6192077ead760ba0a2d350987d4c before 4ee94790490ae8dcc97df8597f07836c8a81bbcf; 0a19e61e6d4c6192077ead760ba0a2d350987d4c before 5405c90d6a47b3014e74ee0618a162449abbbc93; 4.12 |
| CVE-2026-80551 | 9.3 | Aug 26 | s390/vfio_ccw: Ensure first IDAW remains constant Affected: 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 460b977a4e71cc319fdadf91c193ec3beaa57263; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 0d46c2565f173bcddcdcaf44a4f69789a20535e2; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 08ef2a82115690d6e229615872ac1731af732497; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before fc59e9482117ebdccd6dc7fa8082f8b980fd021e; 01aa26c672c0eb771de4aaa2a8ccf6055778887b before 565bef268d75bf7df665bce6923a88cd0eb74592; 5.3 |
| CVE-2026-74712 | 9.3 | Aug 22 | vdpa/mlx5: Fix buffer length in create_direct_keys() Affected: 0071b138d44af4296bf871e6624369ce697b4b15 before ec3bb289cf19d526224117d5d450a5fd9cbd5ab2; 0071b138d44af4296bf871e6624369ce697b4b15 before cde8931a25392670dd59a0acfcab87a830ab66c5; 0071b138d44af4296bf871e6624369ce697b4b15 before 6c8a9f7bc00301e533a5366384f3070a8e7f8430; 0071b138d44af4296bf871e6624369ce697b4b15 before 727e1f569855df83579edbd73dcb4a0723543a12; 6.12 |
| CVE-2026-74573 | 9.3 | Aug 15 | iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE Affected: d68beb276ba26cec47350a6d468e967673ee0c56 before 3808bab5d95ae79e333e11f6a73d178e084c645d; d68beb276ba26cec47350a6d468e967673ee0c56 before 0acbc621341aca4eb94d9c2f43e1ab273ff088f0; d68beb276ba26cec47350a6d468e967673ee0c56 before c3b8ee84a965058b41275069d4696f37a8b14bf6; 6.13 |
| CVE-2026-74568 | 9.3 | Aug 15 | KVM: arm64: vgic: Fix race between LPI release and re-registration Affected: 3a08a6ca7c373198c84e2a8c025c395ee966ff8a before f8e5715a37378ea1a140ee1162fa441e149c5142; 3a08a6ca7c373198c84e2a8c025c395ee966ff8a before 292e80a159aa88635bf668a7212cfdf526b8bd52; 3a08a6ca7c373198c84e2a8c025c395ee966ff8a before cbfe2b24a1ea9de35032dbdd100fdc700f5be92d; 6.17 |
| CVE-2026-74517 | 9.3 | Aug 15 | KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs Affected: c60f5156e62d0be6c53373b623f16a9e37e2208e before 69d040448067cebdd5598684db36ce7d8fb2f43e; 17bcd714426386fda741a4bccd96a2870179344b before 5f0a99ea721203a4063618aafcca32abf573cb96; 17bcd714426386fda741a4bccd96a2870179344b before ed56a6b58222f9c1f4115a0bd2788dd6ed6022e2; 17bcd714426386fda741a4bccd96a2870179344b before 9910e835580fef3bef53b70241dd00c4bffad693; 6.12.41 before 6.12.105; 6.14 |
The 500 most important CVEs for this product (exploited first, then by severity)