Login Request a demo
LI
Product
Linux
by Linux · last CVE Oct 28, 2026
On CISA KEVExploited in the wild
9,723
CVEs
11
On KEV
10.0
Max CVSS
1052
New 30D
Vulnerabilities9,723In the news12Timeline
Severity mix
Critical 490High 8Medium 2Low 0
Severity
All severities500Critical490High8Medium2Low0
Exploitation
On CISA KEV11Exploited in the wild11
Watch

Add Linux to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-89788
9.8
1%
Sep 16
ksmbd: fix tree connection use-after-free in smb2_tree_connect()
Affected: 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e before ca3a3984bf445aaec69f6937f11e560d4b849365; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e before bd58a52738f7576ee5f5eb74243df13f902c8051; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e before 4e30fbd26e84efa2e5cbec4eb11e126ac0c79313; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e before b5ec6c462aab1062cf5d1e667ba7c6442f737055; dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c; 7b58ee8d0b91359554cf219cd4f33872ea2afd66; +3 more
CVE-2026-89783
9.8
1%
Sep 16
xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
Affected: 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before 91fc387f63c00ddfb5221127a17bac97549a8343; 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before 68e8737fe8e72f085c608cff322b3d2de8340af1; 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before 8fe2c53fb81f5ad5be43af2ad09583f7c78b4b77; 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before bdcda866c89f9a8b1acdabf02d26cde9fbe501d8; 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before 48996649222e95008cdb98cd58579e3fc8e5ee06; 9473e1f631de339c50bde1e3bd09e1045fe90fd5 before 0f679e0523ddfff3fb554336ceb874b0e51e9cd3; +3 more
CVE-2026-89778
9.8
1%
Sep 16
isofs: fix out-of-bounds page array access on empty zisofs block
Affected: 59bc055211b8d266ab6089158058bf8268e02006 before 8b994ac5778a725982fd6a8a3afcaa068d4a93e3; 59bc055211b8d266ab6089158058bf8268e02006 before ad3249cdf9d4ba34bb8b1ff3956a4020fdfb5b0a; 59bc055211b8d266ab6089158058bf8268e02006 before 85904076cece72ee3194646ad7ac8e6659d999aa; 59bc055211b8d266ab6089158058bf8268e02006 before f03425dcbe04aec3c27b9917e97d7d23a2908dda; 59bc055211b8d266ab6089158058bf8268e02006 before cd616aa0449a772a6956abf03358f0ff31720580; 59bc055211b8d266ab6089158058bf8268e02006 before 9c6eace8d07e90f038c89eb3b756d65a7e259d48; +2 more
CVE-2026-89712
9.8
1%
Sep 11
NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock
Affected: a4bc287943f5695209ff36bdc89f17b48d68fae7 before 2b59029b8f24a99b5d844af2da3950d39d36eeea; f4e44b393389c77958f7c58bf4415032b4cda15b before d9e151fea5ed706c1284adacabd869b0be745db2; f4e44b393389c77958f7c58bf4415032b4cda15b before 659ee3da073164e1e6e40dfcbc26eeed85845f93; f4e44b393389c77958f7c58bf4415032b4cda15b before 60680ae7243b22de3d09be990d8e23bcfc4af837; f4e44b393389c77958f7c58bf4415032b4cda15b before 77de363d9a1c8cd35f20482782c612cda085791a; f4e44b393389c77958f7c58bf4415032b4cda15b before 4ed8d2317aef21cc2a9e5a55d6b59860b4b151a8; +4 more
CVE-2026-89708
9.8
0%
Sep 11
nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
Affected: dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 before 2775ec1d617e665eab71ce0f13ab1f7959713a2b; dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 before f164eb52b6f3cbf40f07fe379f9f421f88e02f76; dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 before 13bdd486c3aad4fc19e6d8b9c3556a4b4c190b25; dcbeaa68dbbdacbbb330a86c7fc95a28473fc209 before 01c5d5f58a5db9b0ee5afba2e49d3157788687b2; 2.6.38
CVE-2026-89703
9.8
1%
Sep 11
nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations
Affected: 8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a before d832a0587528853d45481d1faf75d4b5d062adaf; 8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a before 1e4795766719ffd74b8cf0f2fde4a1350f8326bf; 8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a before a6d89032e5c6620d5bb44582a72555ce07bf1c2e; 8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a before 650d370cfbc66a96dd14d517bd704689b5bda4e5; 967faa26f313a62e7bebc55d5b8122eaee43b929; 6.11.6 before 6.12; +1 more
CVE-2026-89702
9.8
0%
Sep 11
nfsd: size fh_verify server sockaddr slot by xpt_locallen
Affected: 051382885552e12541cc0ebf82092be374a9ed2a before 1c6a4d6c20fd42552ffc2c3dfaed2139c9477ee5; 051382885552e12541cc0ebf82092be374a9ed2a before 95d064f9828a20ccca5ae90a17be3e2076f25272; 051382885552e12541cc0ebf82092be374a9ed2a before 7ff8d6363cffff45654ea85e319f7c0c54226012; 051382885552e12541cc0ebf82092be374a9ed2a before 719a10e3f5f868c3c4ac3cf3648c5775d12034bd; 051382885552e12541cc0ebf82092be374a9ed2a before 71d068490098b1d23c63b2345e40675d3a1ca763; dcbebc86850324fbe0a993ce352f0539cd98038a; +3 more
CVE-2026-89689
9.8
1%
Sep 11
nfsd: don't free session slots that are still in use
Affected: fc8738c68d0bbf5033dd98b4f63d277ecbd49fd7 before 72d40b103bb03f0124d3a3c8f71a30cbafaf6afa; fc8738c68d0bbf5033dd98b4f63d277ecbd49fd7 before b449b134e7762ddf98653a4b1d3e76d2d212ea64; fc8738c68d0bbf5033dd98b4f63d277ecbd49fd7 before f5d22e372f4ac3eb287037a488c29691d52a6330; 6.14
CVE-2026-89688
9.8
1%
Sep 11
nfsd: drop the stateid, not the stateowner, on seqid_op replay retry
Affected: eec7620800081e27dbf8019ac2e66259f0d5bf6f before 69ed78b6b947c9257213164678b4edf17533093b; eec7620800081e27dbf8019ac2e66259f0d5bf6f before 00843074d9b84824552c9679d423d29500ca5de0; eec7620800081e27dbf8019ac2e66259f0d5bf6f before f7cb90ddc021747fc9abfd4cf5252d425fd34eec; eec7620800081e27dbf8019ac2e66259f0d5bf6f before 5e4627d3513e60accfce9d5f4c7fa95251ef93d6; 6.10
CVE-2026-89686
9.8
1%
Sep 11
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke
Affected: c5c707f96fc9a6e5a57ca5baac892673270abe3d before d12af460df27876661707efab3a8532146cb961f; c5c707f96fc9a6e5a57ca5baac892673270abe3d before c517f27498757e616d2a8fe6d16caad1fee422e6; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 607a56fea772c1f4f4989d8e255dd4f7192d9604; c5c707f96fc9a6e5a57ca5baac892673270abe3d before 97bda8b4284d90897a1f1922e5082ff9e35d7c7e; c5c707f96fc9a6e5a57ca5baac892673270abe3d before ca94ba36172046be6a694a7986f6931e47ed4d51; 4.0
CVE-2026-89681
9.8
1%
Sep 11
nfsd: fix layout fence worker double-reference race
Affected: f52792f484ba2316853736856dde19b7e7458861 before a278d361e0e8f242211891193d56483a7a9f47a8; f52792f484ba2316853736856dde19b7e7458861 before 8580571227451384399b3fa53fcde19848c48e5a; 7.1
CVE-2026-89677
9.8
1%
Sep 11
nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()
Affected: 64a989dbd144e0622371396461b11335459692d2 before 033e783709ce99662cf81f6abcad746a8da9d35f; 64a989dbd144e0622371396461b11335459692d2 before 3e2c79360c6a89975ec5b5a7d4ef937e4db91a27; 7.0
CVE-2026-89676
9.8
0%
Sep 11
nfsd: fix stale s2s_cp_stateids IDR entry for async COPY
Affected: e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before bdce362f49410b9def65d76c21f6259cd89696d8; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 7aa34ea78f74e6ef60c8112635a87fc43d57f6c9; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 9b4e5e9ba5ae13808b8a6d229d87c54611ba0e7a; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 14b978e8d05ce018d0afbeb6611833ef91713a02; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before d0beaee498e11880e72826026db0e9c9890fc114; 4.20
CVE-2026-89675
9.8
0%
Sep 11
nfsd: fix UAF in async copy cancel and shutdown
Affected: e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 9031493ef7369d5c59c4bacc96f0c85965f09a98; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before a385cf5e016b748babf94cc664e43a26e17db117; e0639dc5805a9d4faaa2c07ad98fa853b9529dd3 before 62c0f6eaf050bb9284c1f9cac6ed1770092e6b95; 4.20
CVE-2026-89674
9.8
1%
Sep 11
nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget
Affected: 9b9960a0ca4773e21c4b153ed355583946346b25 before 3a7fd224df0fbb42167eb1b77be45d72fe0b1098; 9b9960a0ca4773e21c4b153ed355583946346b25 before 29e4478e2ed5a227e8f0c33cacb91bf227cedd47; 9b9960a0ca4773e21c4b153ed355583946346b25 before 65a72b721943618eeb3a41c8b36e915591f3f83f; 9b9960a0ca4773e21c4b153ed355583946346b25 before bee826c00ac900473f91306f1f3e5a5a81fd4a74; 9b9960a0ca4773e21c4b153ed355583946346b25 before e7d9d23ecd9172f05b09bb678ff22db8e361c428; 9b9960a0ca4773e21c4b153ed355583946346b25 before 0380129b1373c437eb35401a174671c8888f4b80; +3 more
CVE-2026-89669
9.8
1%
Sep 11
nfsd: initialize copy-notify stateid before publishing it
Affected: 624322f1adc58acd0b69f77a6ddc764207e97241 before 863b6e995665472f2af5be2436a874ab6a9e5ac6; 624322f1adc58acd0b69f77a6ddc764207e97241 before d18d36395d973ef7372c8e6724970585f75b5c0b; 624322f1adc58acd0b69f77a6ddc764207e97241 before 4415a692346a39fdb647cbd717eda510159aaf55; 624322f1adc58acd0b69f77a6ddc764207e97241 before 9caad13b7cfe9ccb90cc405ac77335800e086595; 624322f1adc58acd0b69f77a6ddc764207e97241 before e08a3dcaca0505f861e344a387f37f94d95dbdc2; 624322f1adc58acd0b69f77a6ddc764207e97241 before a4d7fedcaaf33e60a01e53eafca9041ef966212f; +3 more
CVE-2026-89662
9.8
1%
Sep 11
NFSD: Prevent lock owner use-after-free during client teardown
Affected: 68ef3bc3166468678d5e1fdd216628c35bd1186f before 42d7954b0a1907d4ef122aef94561952a033cdc3; 68ef3bc3166468678d5e1fdd216628c35bd1186f before bb38ff8b4dafbbd1781ad37cd96722fdf2cd972a; 68ef3bc3166468678d5e1fdd216628c35bd1186f before b8bad5a11416b26cc7fd4b18fba46d75ff636558; 68ef3bc3166468678d5e1fdd216628c35bd1186f before 1ce74d1b7770e69735e8f8e509807af4ff9c8ee7; 68ef3bc3166468678d5e1fdd216628c35bd1186f before a6ead6fff3a7d03e49845f048f7000a2e0d34431; 68ef3bc3166468678d5e1fdd216628c35bd1186f before 4804c58f73a80d12df1de323bf97a164f6ee8743; +9 more
CVE-2026-89660
9.8
1%
Sep 11
NFSD: Prevent client use-after-free during admin state revocation
Affected: 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before e1ba4d3c5bfdca3f013b8cbc829ae2f7975d8608; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before 549bd9868e9d77b07ea94870940d64342829c6ad; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before bf1f948691523282cc4905bc6cd325e0c0b49e6a; 1c13bf9f2e3cd5a59ef988c6c5a49fe0f02bcdfc before e270e5a0778e5bff852c8862ce9576ce70359393; 6.9
CVE-2026-89659
9.8
0%
Sep 11
NFSD: Prevent client use-after-free during delegation revoke
Affected: 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 94f0c73797c30a35812ffb32d11b8737d245c405; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 0dd276b1324a5e08e83c6f675919946c9f0d61c9; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 3c0a53ee0b442348d8d2286d6960d3f07bb3a3d3; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 2a9d637c2a8fd8ac29ad9b29f28d122ef75c1a56; 3bd64a5ba1719c2bb6cba4493dfd3e23a7653e54 before 4683ca76b3b7e5808338491c6eb3c20e6b4894d5; 3.10
CVE-2026-89658
9.8
1%
Sep 11
NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup
Affected: d688d8585e6bea5e4e37f7497feea93b6b0a469c before 0ae0d2b5c5a1b39c0b3c15d96b32a5b0c583d519; d688d8585e6bea5e4e37f7497feea93b6b0a469c before b413ec5b23e3445dc9c4f273116078e2d4747626; d688d8585e6bea5e4e37f7497feea93b6b0a469c before 81cf7f1413862f87b078920c838460a6a88aa030; d688d8585e6bea5e4e37f7497feea93b6b0a469c before 7b4f8a1586c42d3afc3c0ac779af2db7ab1a5c55; 6.9
CVE-2026-89656
9.8
1%
Sep 11
libceph: reject buckets with mismatched CRUSH ids
Affected: 66a0e2d579dbec5c676cfe446234ffebb267c564 before ee59040d6ed1a5f8d10d27174b8f32c90ca8e89a; 66a0e2d579dbec5c676cfe446234ffebb267c564 before baad5875fdd2f5e248250fc3519bb045d64f1716; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 4aeb93daadf388e72073abc204312dd364eeb30a; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 6e5c6ce252b1eccfd41670a5cf95ab44f7ba7022; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 3516a4131c4e45d62ee4e42e82c36930e8c1fbbd; 66a0e2d579dbec5c676cfe446234ffebb267c564 before 00562ccd4e88d092b9b851df50fad20442bfeb24; +3 more
CVE-2026-89655
9.8
1%
Sep 11
ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock
Affected: e4500b5e35c213e0f97be7cb69328c0877203a79 before 091137821e1fc88f37e15201abf055c9494ddc61; e4500b5e35c213e0f97be7cb69328c0877203a79 before 01542430081014d80fc9e70e92d6647432ddb7fc; e4500b5e35c213e0f97be7cb69328c0877203a79 before 23eb34a53a53cb1a6dab1eeee830633207ac158d; e4500b5e35c213e0f97be7cb69328c0877203a79 before 19f16f04c2b014a7dd214dc1e42557d8530b16f3; e4500b5e35c213e0f97be7cb69328c0877203a79 before 2701431aa3cc8b23efe6890182e7b04f5e76fab5; e4500b5e35c213e0f97be7cb69328c0877203a79 before fe46746087b5b9c5bb2d022df6c7819218494ced; +3 more
CVE-2026-89654
9.8
1%
Sep 11
ceph: fix UAF in check_new_map() on session freed during unlock
Affected: 2f2dc053404febedc9c273452d9d518fb31fde72 before 352a278d5a1965aae3f817ce5d24a67ee42d45d1; 2f2dc053404febedc9c273452d9d518fb31fde72 before 820871e9dbeecd2533c4c5f5d91878ceaf02324c; 2f2dc053404febedc9c273452d9d518fb31fde72 before 9646dfee880730aae4b379a4b8ee6c88ac735acd; 2f2dc053404febedc9c273452d9d518fb31fde72 before 21d5be092d947f8d83f76f7ebf3989e7e9230a98; 2f2dc053404febedc9c273452d9d518fb31fde72 before ee611a7509554c4ca1f54f6aefe592fb1df7ea70; 2.6.34
CVE-2026-89653
9.8
1%
Sep 11
ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode
Affected: d517b3983dd3106ca92d6c5d0d09415a4a09481c before 3740c88ca9cb2210a8dbdd55ea4cec119fbe86fe; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 8c823bbab3c24e657469a84db96902ba82d4e8bb; d517b3983dd3106ca92d6c5d0d09415a4a09481c before c4addccd05bacbef2144b4db14853d0308a218ac; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 736adee11af36e407ed902264f8b2fb5cf94b62f; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 4d298880f82c42383b36946bafde7ccf4d804c9b; d517b3983dd3106ca92d6c5d0d09415a4a09481c before 96c3f5fbb0d5386e7111426f047f98cec4586674; +2 more
CVE-2026-89652
9.8
0%
Sep 11
ceph: bound copied dentry name length in NFS export get_name
Affected: 19913b4eac4a230dccb548931358398f45dabe4c before a294064e0e0f81ea607b2f019e16888aa1b0a011; 19913b4eac4a230dccb548931358398f45dabe4c before 61d9f27b191b838b96b697ce0bfaee39a138243a; 19913b4eac4a230dccb548931358398f45dabe4c before 06fb5e623cdc2402d6bb29be94d9beb9a826ffec; 19913b4eac4a230dccb548931358398f45dabe4c before e7c2fd3893a7f7fcd7e8cf0b2c6348bb1e893df6; 19913b4eac4a230dccb548931358398f45dabe4c before eff8013c5a8916613c742ae5a2cc341cb605c0ae; 3.15
CVE-2026-89651
9.8
1%
Sep 11
ceph: bound MDSCapAuth path and fs_name decode in handle_session()
Affected: 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before dc5c7dffda92ef372fa587c444a1c537373df824; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before c37db86d2b5e9b57001ccae7e7a727e95a4f9c02; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before 5f892c767b30e4fb0c744c59f9235c717383d2cd; 1d17de9534cb5a4c4c380d174cc2f9281b34f89e before 77933e22adfe813be2bd10be08d6e950103c3967; 6.10
CVE-2026-89643
9.8
1%
Sep 11
audit: avoid dropping live tree ref on fsnotify rule autoremove
Affected: 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 9cac21f8eb82675ed19fb955b8bbb9dd14cc3d58; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before b322cc7adcd2e6ec1594d187533a126506ab545c; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 695c85dc345a4e0292739f004c261bedef3f27e6; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 01b0ec8c397be65ff710777c97017ca1de56ef8e; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before cf37b61b5420fd4600fe78cf8c24da6e4d9bfe28; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc before 636a99bab36ba27515363d325866c0273ac83b3e; +3 more
CVE-2026-89637
9.8
1%
Sep 11
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2
Affected: 316cf94a910f6f93d43cc574359d163ccae098a3 before 9eed72e9534b10a6d9f8f5146feff3db53aebdba; 316cf94a910f6f93d43cc574359d163ccae098a3 before 5e6533a683f6a851158d9f33fb4ea8f4f25d7f84; 316cf94a910f6f93d43cc574359d163ccae098a3 before 730d0bb19507b9e19c2fe5343109ac618e2fbce5; 3.6
CVE-2026-89636
9.8
1%
Sep 11
smb: client: clear ce->tgthint in free_tgts()
Affected: 54be1f6c1c37498bba557049df646cc239fa37e3 before 14f60e959b5ac813715ff72e127beb3584ddabf6; 54be1f6c1c37498bba557049df646cc239fa37e3 before 3ff9462bb7a06d8d32a1dc02d39580b078ec9e55; 54be1f6c1c37498bba557049df646cc239fa37e3 before 7507bd1885643d0461a6017767492450af1ce2a3; 54be1f6c1c37498bba557049df646cc239fa37e3 before 9ab46a13798a61d9d020b01d4e57efdabe6624fa; 54be1f6c1c37498bba557049df646cc239fa37e3 before 5baab40404a9393bcc0b7b8f1950bf2c307e0984; 54be1f6c1c37498bba557049df646cc239fa37e3 before b1b741cf8e7ce1b91d937e23decd3d3358748700; +1 more
CVE-2026-89635
9.8
1%
Sep 11
ksmbd: only rebind the reopened file's own oplock on durable reconnect
Affected: f363a0fb134a3eb9e47368b1edbd251fd76be84b before 74e3ef4630f004c0de40c0540648a5a4033c6c9d; f363a0fb134a3eb9e47368b1edbd251fd76be84b before 3f220a0a62e6b9b391c9d1f0e6580b05173cc7f7; 7.2
CVE-2026-89633
9.8
0%
Sep 11
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()
Affected: e4eb295d38b57f4d4b956942a48887eb252d97c6 before 6eb70b78e48b0031bd1a05fe1b58959a48e87739; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 36d01415d881d5326a0dd3384f781cd7e69aff2d; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 672cf86aa6aa0fb4012ce4c3b3498df42ad67a4e; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 033bc80019f07d158630df4e69b19a49010f54f1; e4eb295d38b57f4d4b956942a48887eb252d97c6 before 6343c1da561962688f203362d80d6a3bfa39fa1b; 2.6.12
CVE-2026-89614
9.8
1%
Sep 11
ntfs: bound the free-cluster bitmap scan to the volume
Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before dc15a9f5307d5372aef3b64bf3ed7802f530c471; 11ccc9107dc460de28af90fac1f42404d9802735 before 19cac7902a8ab748e15f98ddaafcf5f8882be21d; 7.1
CVE-2026-89613
9.8
1%
Sep 11
ntfs: reject invalid empty mapping pairs
Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before b0cc6dbc655e037251874b3e0dd1a760dcf29007; 11ccc9107dc460de28af90fac1f42404d9802735 before 766062a82e1ce4087c7dc077224144dfd34b3661; 7.1
CVE-2026-89612
9.8
1%
Sep 11
ntfs: reject invalid MFT LCNs from boot sector
Affected: 11ccc9107dc460de28af90fac1f42404d9802735 before 8f8420b68a6f05ca2b03779d8208814ec539b9e5; 11ccc9107dc460de28af90fac1f42404d9802735 before cc9d09fef78410bcd37ac05168cbd5f6dd75d3d2; 7.1
CVE-2026-89611
9.8
1%
Sep 11
ntfs: validate non-resident attribute offsets
Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before cd7b3dc7557faadeea626034e3bac68a449851ef; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a83e82b0ec3ae523028e24813f23f18b43e8fc1c; before 7.2.4
CVE-2026-89610
9.8
1%
Sep 11
ntfs: verify run length exceeding volume boundary
Affected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6e844d4b82434a781b80d02145fd1b17cf90e3c3; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fea9e4488f384c0ef1c0e3d96b565127c1b98447; before 7.2.4
CVE-2026-89558
9.8
1%
Sep 11
md/raid10: fix still_degraded being inverted in raid10_sync_request()
Affected: fe6a19d40ceb44281905485f56dda715e3214e0e before 9bb8da6ecb330a5b1ac9b96f1e55f134a7aef1d4; fe6a19d40ceb44281905485f56dda715e3214e0e before 0efabe6229dc683dbf6eeebd0f9fddc7971ed420; fe6a19d40ceb44281905485f56dda715e3214e0e before 00449d752bee9c8787f42ea1bf533a9fb17f9b6b; fe6a19d40ceb44281905485f56dda715e3214e0e before 47f1441b281decde6954a2fa82b4131637d685ac; 6.12
CVE-2026-89555
9.8
1%
Sep 11
mpls: reload header after pskb_may_pull()
Affected: 9f427a0e474a67b454420c131709600d44850486 before aa4fe0b450a461aa1162fe8375f5d28f4c957df8; 9f427a0e474a67b454420c131709600d44850486 before b1c0783b2facc398437ad8f8b86c636d7a78f8db; 9f427a0e474a67b454420c131709600d44850486 before bfaaff99238326166694354a63a76c02563f98b1; 9f427a0e474a67b454420c131709600d44850486 before d9640239827d6d0cb84263b590f7a4f1596c17eb; 9f427a0e474a67b454420c131709600d44850486 before fed638a248116b8a249bd4202d28e5934bdc65ad; 9f427a0e474a67b454420c131709600d44850486 before d82b90a38c2ca8a0694428eab0e9551c23f2447d; +5 more
CVE-2026-89551
9.8
1%
Sep 11
SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow
Affected: 4c190e2f913f038c9c91ee63b59cd037260ba353 before a3d77bcd974b8625d16bddf448cb3a1b5e37049c; 4c190e2f913f038c9c91ee63b59cd037260ba353 before fa16bbe987b47e771e52eeb1b4540f18d92496ac; 4c190e2f913f038c9c91ee63b59cd037260ba353 before a924ac4c78afab71bf82641afa3b62e0c4a8b55e; 4c190e2f913f038c9c91ee63b59cd037260ba353 before 4bf59cb0ea5b0ddfbc46a1dc2fa78fc8b9986ce4; 4c190e2f913f038c9c91ee63b59cd037260ba353 before e6267cccd7b05cc514e57f2160aa8db85f5c2701; 4c190e2f913f038c9c91ee63b59cd037260ba353 before ad0cce80d4af2f74674e8b635d97aa3880e83da8; +3 more
CVE-2026-89550
9.8
0%
Sep 11
SUNRPC: svcauth_gss: enforce krb5 token minimum length
Affected: 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before 0ea5b0c7f212c2772d32c2b88287b89a9cdf6edd; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before dd6afc6cab8c5d387d1ed2f069562ef7bdadd651; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before de942dd8c2c8358bcad04ce44271954c48924423; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before 2eed1e6a976a44015c3ee78841fe336796e2b21c; 7c9fdcfb1b64c47ed618c103b617af3f86e1239c before a919c5c88769cf8fb3ec071e6078d830bf512489; 2.6.18
CVE-2026-89546
9.8
1%
Sep 11
SUNRPC: close backchannel before destroying callback service
Affected: 441244d4273a8037b265fd254dfdaca5fa736ee2 before 6debde9e3e6ae21dcca75837b4247b13ca4ea2b8; 441244d4273a8037b265fd254dfdaca5fa736ee2 before 3674f780f47d2906b5a0f7199b66973067bdfeca; 6.19
CVE-2026-89542
9.8
1%
Sep 11
SUNRPC: harden gss_krb5_unwrap_v2 against short tokens
Affected: de9c17eb4a912c9028f7b470eb80815144883b26 before 299d281c7225ded15b28cb861a98d818d82787fc; de9c17eb4a912c9028f7b470eb80815144883b26 before 84ddbc8d084c0251d534f14f5d1a7da05be56404; de9c17eb4a912c9028f7b470eb80815144883b26 before 075d7cfc4df8c54cb202ba8b28420370c03ba9b6; de9c17eb4a912c9028f7b470eb80815144883b26 before f2591660e0eb263c9415bf0d0bb1b111e62df7a4; de9c17eb4a912c9028f7b470eb80815144883b26 before dddcb0f4b7e27fac16a78ea9a1c8ec2e8a241087; de9c17eb4a912c9028f7b470eb80815144883b26 before 806584a4b67a7233870c33e5b8f872e76dd02988; +3 more
CVE-2026-89541
9.8
1%
Sep 11
SUNRPC: harden gss_unwrap_resp_priv length checks
Affected: 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 3691c4b3488d8ca046b9941e5be30c626dbbbb50; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 85fa6b12e8f439739ac36ef2aad925f37c8b976a; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 401f6a5b338d05bb1069ad814d9f77e3c367854f; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 81fd7654a8429718adfcb2a7e03496077f547ed0; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before 89a15a50f84d32d4b99db86f957427fcbe20a99a; 2d2da60c63b67174add32f06e8d54c3a0c5cd9cf before ebcbd2523a8524c3d24e111cdbed8e271d910269; +3 more
CVE-2026-89538
9.8
1%
Sep 11
SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field
Affected: cf4c024b908353fcc48309374d39e3399d67dfd1 before ac9efc29346b6942e71f0e24a3178a9121330fab; cf4c024b908353fcc48309374d39e3399d67dfd1 before b5746095b59f4d11f39f08751d36bbdfd1e5deac; cf4c024b908353fcc48309374d39e3399d67dfd1 before 9fc6d6e6db49ab55208d5dd1c424c1d0d9aa7296; cf4c024b908353fcc48309374d39e3399d67dfd1 before 4abb44a29bb515df6f49123848765c70fc9b5021; cf4c024b908353fcc48309374d39e3399d67dfd1 before dfcd81ab45613d45996fbf483d4ef54b0ec90ab9; cf4c024b908353fcc48309374d39e3399d67dfd1 before 1f9856af065b6158271687e9788407b9573fd16f; +3 more
CVE-2026-89536
9.8
1%
Sep 11
SUNRPC: wait for in-flight client TLS handshake callback
Affected: 75eb6af7acdf566c68d61e98e67ee2f235201c02 before fb43997407bc17ee39bac81ab708101312e255f5; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 15431820f448e09f8029b670d5c82aa5917d4625; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 1de391e8b94e31b45c19c16dbf315e294810c7de; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before 7fbb6d2ab0391eb8d1f1a68e6bc263ef02cea61b; 75eb6af7acdf566c68d61e98e67ee2f235201c02 before a89dd597458848b463d284b15e42a8078beeb046; 6.5
CVE-2026-89533
9.8
1%
Sep 11
svcrdma: Fix offset arithmetic in read_chunk_range
Affected: d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 10873311f91db9454e2fadbf9866bc819e0646d9; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before addbf02dfe3b25e7e38e03bbd4e2a6ed86a14be7; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before cba8543c18cf42fd80fd63effb6df6ff4f7e73ce; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 6ee4dc7476b3abc92ec1d444533a559f33f59561; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before a46b35f213c2426f5d6a0458a8f7e873fc59cdfd; d7cc73972661be4a02a1b09f1d9b3283c6c05154 before 4493c96bbd0068fadf69cbae8d13426202e34cdc; +2 more
CVE-2026-89530
9.8
0%
Sep 11
svcrdma: Reject inline replies that overflow the pull-up buffer
Affected: e248aa7be86e8179f20ac0931774ecd746f3f5bf before 8068358f445a11296328ffa7c524701596814a17; e248aa7be86e8179f20ac0931774ecd746f3f5bf before fcd91b9957462d398792201c239dffaeff1cc8b2; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 1949dd1576f7a8aa161b1330c6125df9d53046d5; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 8ec60eb51fae37cd3d334ff26e4a7d6fb21ff7cf; e248aa7be86e8179f20ac0931774ecd746f3f5bf before 0fbe20dfe74b783d255bf389a6ea77aa25dc7860; 9b65b18f817d9ada2bf67351f24bdcce6789a0bb; +4 more
CVE-2026-89526
9.8
1%
Sep 11
svcrdma: Validate Read chunk positions before reconstruction
Affected: d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 3861eeabaebe243050952b34063763527c44e1fe; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 5ab3f6d882fe07ae5e61d0bcfeea00b9409155c2; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before f84ec84d8d4bc65f9ae23372570349687f66fa39; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 577097455d084610fc31e91e6a61c5793b6f04ba; d96962e6d0e281bab6a48e83b42f5dce6eb28bf4 before 3779b7b9e7d1c8ba4738f9d327de3b0288cefe9b; 5.11
CVE-2026-89495
9.8
1%
Sep 11
ocfs2: bound namelen in dlm_migrate_request_handler
Affected: 6714d8e86bf443f6f7af50f9d432025649f091f5 before e1288865b8ceac0dcd1009ecba43de961f13d5bd; 6714d8e86bf443f6f7af50f9d432025649f091f5 before aabc5d8388e6f8826345f0073455dbcaaaa6491d; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 006c96ea488eca2ef5155ec76038e0a4dbf65f0a; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 24989909d3413b44b104102caa6661b1e424ba0f; 6714d8e86bf443f6f7af50f9d432025649f091f5 before f8658ee3327f73bd81c0bcd07cdeb5a8527fac98; 6714d8e86bf443f6f7af50f9d432025649f091f5 before de10cd3b062a5235af754925fcf49beb5a1109d4; +3 more
CVE-2026-89494
9.8
1%
Sep 11
ocfs2: validate lengths in dlm_mig_lockres_handler
Affected: 6714d8e86bf443f6f7af50f9d432025649f091f5 before 4a5798253212093b9ff7d90c6cfbe348bcda1594; 6714d8e86bf443f6f7af50f9d432025649f091f5 before dce05b17db862f47ff60614017abe639b2e71cad; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 0e999d56917f861f97adb961617b1828c9eb4733; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 77686fa5bba135252d348e2dacf481fc19f60c41; 6714d8e86bf443f6f7af50f9d432025649f091f5 before f33041906885f96e190cde54e61ddc69de39e3ee; 6714d8e86bf443f6f7af50f9d432025649f091f5 before 50c4cc9183e11f83427efbf770f54851f4471c02; +3 more
Page 2 of 10 · 500 total
123…10
The 500 most important CVEs for this product (exploited first, then by severity)